On 16.2.2011, at 22.49, Thomas Skowron wrote:
>
>> Another thing I thought of was chrooting, but I don't see any chrooting in
>> your config.
>>
>> Maybe you could find out something interesting by starting Dovecot with
>> "strace -f -o log dovecot".
>
> 15311 setresgid(-1, 5000, -1) = 0
> 15311 setresuid(-1, 5000, -1) = 0
So it changes uid and gid to 5000.
> 15311 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied)
> 15311 open("/etc/group", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied)
> 15311 stat("/home", 0x7fffd3a4c4a0) = -1 EACCES (Permission denied)
> 15311 stat("/etc/localtime", 0x7fffd3a4c100) = -1 EACCES (Permission denied)
But that doesn't have permissions to do anything. If it's not because of
filesystem permissions or SELinux/Apparmor, I don't know what it could be.
> Is setresgid(-1,5000,-1) correct? I mean: -1!?
Yes. -1 means it's not changed.
