Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 154182 Details for
Bug 215722
SELinux postfix denials
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
Record of IRC chat about this bug on #postfix
irc-chat-postfix.txt (text/plain), 5.36 KB, created by
Matěj Cepl
on 2007-05-04 22:31:39 UTC
(
hide
)
Description:
Record of IRC chat about this bug on #postfix
Filename:
MIME Type:
Creator:
Matěj Cepl
Created:
2007-05-04 22:31:39 UTC
Size:
5.36 KB
patch
obsolete
>kvÄ 04 23:41:06 <mcepl> Hi, is there anybody capable enough of internals of postfix to have some clue about https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=215722 -- why in the world postfix goes to /boot? >kvÄ 04 23:43:18 <xpoint> mcepl, redhat >kvÄ 04 23:43:32 <mcepl> xpoint: yes, and? >kvÄ 04 23:43:46 <xpoint> postfix is not doing this >kvÄ 04 23:44:43 <mcepl> xpoint: OK, let me be sure about what you are saying -- the fact that postfix tries to open /boot, /home, /tmp is in your opinion result of RedHat-specific patch? >kvÄ 04 23:44:59 <xpoint> yes >kvÄ 04 23:45:13 <xpoint> could be selinux ? >kvÄ 04 23:45:36 <mcepl> no, SELinux *detects* this behavior, it doesn't do it! >kvÄ 04 23:45:55 <mcepl> there is no way, how SELinux will make any program to go to /boot >kvÄ 04 23:46:25 <mcepl> sorry, for exclamation mark -- that's probably unnecessary >kvÄ 04 23:47:29 <xpoint> point is that its redhat, postfix sources dont do anything in boot >kvÄ 04 23:47:41 --- _gAri- is now known as gAri- >kvÄ 04 23:49:56 <mcepl> xpoint: are you sure? you reject as a possible explanation https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=215722#c9 ? >kvÄ 04 23:50:15 <mcepl> (or that this could be in the upstream postfix?) >kvÄ 04 23:53:02 <sysmonk> mcepl: it does a getattr /boot ? >kvÄ 04 23:53:10 <sysmonk> or tries to OPEN the /boot ? >kvÄ 04 23:54:25 <sysmonk> mcepl: do you have /boot as a partition, or it's just a subfolder of / ? >kvÄ 04 23:54:44 <mcepl> I got in https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=145732 only getattr / but some other user reported getattr on /boot, /home, and /tmp >kvÄ 04 23:54:52 <mcepl> sysmonk: partition >kvÄ 04 23:55:03 <sysmonk> mcepl: and /home and /tmp are partitions too, right? >kvÄ 04 23:55:10 <mcepl> only /home >kvÄ 04 23:55:56 * sysmonk ponders >kvÄ 04 23:57:23 <mcepl> sysmonk: take a look at https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=141261 (I think it should be grokable even for non-RH guy, grep on getattr) >kvÄ 04 23:57:29 <sysmonk> ok, just a guess, postfix doesn't queue mails if the partition where the queue dir ir has less than SOME_CONFIG_PARAM >kvÄ 04 23:57:36 <mcepl> sysmonk: and of course, I have no clue about partitions of that other guy >kvÄ 04 23:57:38 <sysmonk> so that it wouldn't fill up the space >kvÄ 04 23:58:14 <sysmonk> so, just a guess, that it could take the info about all the partitions ... >kvÄ 04 23:58:18 <mcepl> sysmonk: could you switch off this test (even with possibly fatal results for user)? >kvÄ 04 23:59:27 <mcepl> sysmonk: curl 'https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=141261' | grep getattr | less >kvÄ 05 00:00:09 <mcepl> but consider also https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=215722#c3 -- some of these were fixed >kvÄ 05 00:01:00 <sysmonk> mcepl: too much stuff to read ;P >kvÄ 05 00:01:02 <sysmonk> lol ;) >kvÄ 05 00:01:10 * sysmonk is lasy >kvÄ 05 00:01:34 <mcepl> sysmonk: sorry, I am employed as a bugmaster and forgetting that people are commonly not reading hundred bugs a day ;-) >kvÄ 05 00:02:06 <sysmonk> mcepl: just that it's 1am here >kvÄ 05 00:02:23 <sysmonk> and i'm after 9 hours of work and 3 hours of studdies >kvÄ 05 00:02:26 <mcepl> where is "here"? it's midnight here (Prague) >kvÄ 05 00:02:28 <sysmonk> and few hours of walking in the city >kvÄ 05 00:02:36 <sysmonk> mcepl: lithuania >kvÄ 05 00:02:43 <sysmonk> not far :) >kvÄ 05 00:02:49 <mcepl> I see -- go to bed, man, and thanks. >kvÄ 05 00:03:53 <sysmonk> i'm looking at the config params, i can't see anything to disable it >kvÄ 05 00:04:01 <sysmonk> With Postfix versions 2.0 and earlier, a queue_minfree value of zero means there is no minimum required amount of free space. >kvÄ 05 00:04:25 <sysmonk> and with >2.1, if queue_minfree is 0, it uses 1.5*$message_size_limit >kvÄ 05 00:04:32 <sysmonk> so, kinda, no way to turn it off :) >kvÄ 05 00:04:39 <sysmonk> atleast i don't see any >kvÄ 05 00:05:04 <sysmonk> and, by the way, i didn't say it is REAALY the reason, it's just a first thing i thought of >kvÄ 05 00:05:21 <mcepl> sysmonk: OK, I will paste this log to the bug, can I? >kvÄ 05 00:05:35 <mcepl> (hopefully, maintainer will consider that) >kvÄ 05 00:06:23 <mcepl> sysmonk: but still -- why does it go to ALL partitions, not only the one with /var? >kvÄ 05 00:06:39 <sysmonk> mcepl: i dunno, it's just a guess >kvÄ 05 00:07:35 <mcepl> OK, let's call it a day (or night ;-)). Thanks a lot. >kvÄ 05 00:08:03 <sysmonk> btw, where's the audit.log ? >kvÄ 05 00:09:03 <mcepl> /var/log/audit/audit.log -- why? >kvÄ 05 00:09:46 <sysmonk> i ment the one of your system, anyway, i looked at the bugtraq and found the link to it >kvÄ 05 00:10:56 <mcepl> my (or grep postfix of it) is on https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=145732 >kvÄ 05 00:14:35 <mcepl> sysmonk: and yes, I see this problem all the time (even with evolution sending to /usr/sbin/sendmail now) >kvÄ 05 00:25:57 <sysmonk> mcepl: looked at the sources, and i don't have any ideas except the queue space check >kvÄ 05 00:26:07 <mcepl> sysmonk: cool, thanks >kvÄ 05 00:26:10 <sysmonk> and why /boot - because it's a partition >kvÄ 05 00:26:16 <sysmonk> wich is mounted >kvÄ 05 00:26:21 <sysmonk> which* >kvÄ 05 00:26:29 <mcepl> sysmonk: OK, good night >kvÄ 05 00:27:00 <sysmonk> mcepl: i aint any developer or guru :) so it's just a guess and a pointing finger where you could search for stuff >kvÄ 05 00:27:09 <sysmonk> oh, and you could just email postfix-users@
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 215722
:
141261
|
145732
| 154182 |
154317
|
155038
|
155267
|
155268
|
155647
|
158504