> On 6 Aug 2019, at 23.52, Reio Remma via dovecot <[email protected]> wrote:
> 
> service doveadm {
>     user = vmail
> }
> 
> This seems to have fixed it. Here's hoping for no unforeseen side-effects. :)
> 
> I still need allow dovecot_t ssh_exec_t:file { execute execute_no_trans open 
> read }; for selinux, but there are no more errors in maillog and it can read 
> both the key and known_hosts (from either /home/vmail/.ssh/known_hosts or 
> /etc/ssh/ssh_known_hosts).

There might be. What we usually is just allow dsync user to sudo doveadm 
dsync-server and then add sudo to dsync remote command.

Sami


Reply via email to