interesting - it needs chmod 0666 MilterSocketMode 0666 interesting because the socket on all of my servers for mysqld is /var/lib/mysql/mysqld_dbmail.sock and /var/lib/ in fact is mounted as readonly-namespace while postfix, dovecot and httpd are talking with mysqld over it all the time
Am 04.08.2014 um 22:13 schrieb li...@rhsoft.net: > none of both is enabled > > system is booted with selinux=0as kernel-param > > Am 04.08.2014 um 22:08 schrieb Nicolás: >> Maybe Apparmor/SELinux/alike blocking access to /run directory? >> >> -------- Mensaje original -------- >> De: li...@rhsoft.net >> Fecha:04/08/2014 21:18 (GMT+01:00) >> Para: Mailing-List postfix >> Asunto: service unix:/run/clamav-milter/clamav-milter.socket: Permission >> denied >> >> why is "access denied" here reported? >> >> smtpd_milters = unix:/run/clamav-milter/clamav-milter.socket >> >> Aug 4 21:14:43 testserver postfix/submission/smtpd[12440]: connect from >> local.rhsoft.net[62.178.103.85] >> Aug 4 21:14:43 testserver postfix/submission/smtpd[12440]: warning: connect >> to Milter service >> unix:/run/clamav-milter/clamav-milter.socket: Permission denied >> Aug 4 21:14:43 testserver postfix/submission/smtpd[12440]: NOQUEUE: >> milter-reject: CONNECT from >> local.rhsoft.net[62.178.103.85]: 451 4.7.1 Service unavailable - try again >> later; proto=SMTP >> Aug 4 21:14:43 testserver postfix/submission/smtpd[12440]: NOQUEUE: >> milter-reject: EHLO from >> local.rhsoft.net[62.178.103.85]: 451 4.7.1 Service unavailable - try again >> later; proto=SMTP >> helo=<srv-rhsoft.rhsoft.net> >> Aug 4 21:14:43 testserver postfix/submission/smtpd[12440]: disconnect from >> local.rhsoft.net[62.178.103.85] >> >> [root@testserver:~]$ stat /run/clamav-milter/ >> File: '/run/clamav-milter/' >> Size: 60 Blocks: 0 IO Block: 4096 directory >> Device: 11h/17d Inode: 585885 Links: 2 >> Access: (0755/drwxr-xr-x) Uid: ( 109/ clamilt) Gid: ( 106/ clamilt) >> Access: 2014-08-04 21:13:24.469625838 +0200 >> Modify: 2014-08-04 21:07:45.177892263 +0200 >> Change: 2014-08-04 21:12:32.632279822 +0200 >> Birth: - >> >> [root@testserver:~]$ stat /run/clamav-milter/clamav-milter.socket >> File: '/run/clamav-milter/clamav-milter.socket' >> Size: 0 Blocks: 0 IO Block: 4096 socket >> Device: 11h/17d Inode: 593875 Links: 1 >> Access: (0644/srw-r--r--) Uid: ( 109/ clamilt) Gid: ( 106/ clamilt) >> Access: 2014-08-04 21:07:45.177892263 +0200 >> Modify: 2014-08-04 21:07:45.177892263 +0200 >> Change: 2014-08-04 21:07:45.177892263 +0200