Attachment 144750 Details for Bug 221347 – export from setroubleshootd

export from setroubleshootd

postfix-selinux-denial.txt (text/plain), 2.16 KB, created by Matěj Cepl on 2007-01-03 23:09:26 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2007-01-03 23:09:26 UTC

Size: 2.16 KB

patch

obsolete

>Summary
>    SELinux is preventing /usr/libexec/postfix/smtpd (postfix_smtpd_t) "getattr"
>    to /boot (boot_t).
>
>Detailed Description
>    SELinux denied access requested by /usr/libexec/postfix/smtpd. It is not
>    expected that this access is required by /usr/libexec/postfix/smtpd and this
>    access may signal an intrusion attempt. It is also possible that the
>    specific version or configuration of the application is causing it to
>    require additional access.
>
>Allowing Access
>    Sometimes labeling problems can cause SELinux denials.  You could try to
>    restore the default system file context for /boot, restorecon -v /boot If
>    this does not work, there is currently no automatic way to allow this
>    access. Instead,  you can generate a local policy module to allow this
>    access - see http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you
>    can disable SELinux protection altogether. Disabling SELinux protection is
>    not recommended. Please file a
>    http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against this package.
>
>Additional Information:       
>
>Source Context:               system_u:system_r:postfix_smtpd_t
>Target Context:               system_u:object_r:boot_t
>Target Objects:               /boot [ dir ]
>Affected RPM Packages:        postfix-2.3.3-2 [application]filesystem-2.4.0-1 [target]
>Policy RPM:                   selinux-policy-2.4.6-13.fc6
>Selinux Enabled:              True
>Policy Type:                  targeted
>MLS Enabled:                  True
>Enforcing Mode:               Enforcing
>Plugin Name:                  plugins.catchall_file
>Host Name:                    chelcicky.ceplovi.cz
>Platform:                     Linux chelcicky.ceplovi.cz 2.6.18-1.2868.fc6 #1 SMP Fri Dec 15 17:32:54 EST 2006 i686 i686
>Alert Count:                  1
>Line Numbers:                 
>
>Raw Audit Messages:           
>
>avc: denied { getattr } for comm="smtpd" dev=hda1 egid=89 euid=89 exe="/usr/libexec/postfix/smtpd" exit=-13 fsgid=89 fsuid=89 gid=89 items=0 name="/" path="/boot" pid=10691 scontext=system_u:system_r:postfix_smtpd_t:s0 sgid=89 subj=system_u:system_r:postfix_smtpd_t:s0 suid=89 tclass=dir tcontext=system_u:object_r:boot_t:s0 tty=(none) uid=89

Actions: View

Attachments on bug 221347: 144750 | 324539