> On 6 Aug 2019, at 23.52, Reio Remma via dovecot <[email protected]> wrote:
>
> service doveadm {
> user = vmail
> }
>
> This seems to have fixed it. Here's hoping for no unforeseen side-effects. :)
>
> I still need allow dovecot_t ssh_exec_t:file { execute execute_no_trans open
> read }; for selinux, but there are no more errors in maillog and it can read
> both the key and known_hosts (from either /home/vmail/.ssh/known_hosts or
> /etc/ssh/ssh_known_hosts).
There might be. What we usually is just allow dsync user to sudo doveadm
dsync-server and then add sudo to dsync remote command.
Sami