Hi,
this happens since a few days on a Gentoo hardened system using a
grsecurity enabled kernel running Dovecot 1.0.10, only to 2 of 10
users though:
--8<--
kernel: grsec: From 192.168.0.1: denied resource overstep by \
requesting 537325568 for RLIMIT_AS against limit 536870912 \
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010 \
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574] \
uid/euid:0/0 gid/egid:0/0
kernel: grsec: From 192.168.0.1: denied resource overstep by \
requesting 537321472 for RLIMIT_AS against limit 536870912 \
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010 \
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574] \
uid/euid:0/0 gid/egid:0/0
kernel: grsec: From 192.168.0.1: denied resource overstep by \
requesting 537456640 for RLIMIT_AS against limit 536870912 \
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010 \
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574] \
uid/euid:0/0 gid/egid:0/0
kernel: grsec: From 192.168.0.1: denied resource overstep by \
requesting 537321472 for RLIMIT_AS against limit 536870912 \
for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010 \
gid/egid:30006/30006, parent /usr/sbin/dovecot[dovecot:15574] \
uid/euid:0/0 gid/egid:0/0
dovecot: IMAP(info): block_alloc(): Out of memory
dovecot: child 15708 (imap) returned error 83 (Out of memory)
--8<--
grsecurity only logs the attempted resource overstep.
I already increased mail_process_size to 512M and deleted the
index.cache* files inside the users maildir -- didn't help :/
Any idea why this is happening or how I could find out?
TIA :)
--
Regards,
Wolfram Schlich <wschlich at gentoo.org>
Gentoo Linux * http://dev.gentoo.org/~wschlich/