Attachment 176541 Details for Bug 260201 – Detaqiled description of problem and selected configuration files

Detaqiled description of problem and selected configuration files

spam.txt (text/plain), 3.94 KB, created by Harold Pritchett on 2007-08-28 13:40:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Harold Pritchett

Created: 2007-08-28 13:40:29 UTC

Size: 3.94 KB

patch

obsolete

>Excerpt from /var/log/maillog:
>Aug 28 08:51:49 mickey spamd[1973]: spamd: connection from localhost.localdomain [127.0.0.1] at port 34037 
>Aug 28 08:51:49 mickey spamd[1973]: spamd: processing message <46D41A64.1040506@uga.edu> for root:496 
>Aug 28 08:51:49 mickey spamd[1973]: auto-whitelist: open of auto-whitelist file failed: locker:
>    safe_lock: cannot create tmp lockfile /var/lib/spamassassin/.spamassassin/auto-whitelist.lock.mickey.halshome.net.1973
>    for /var/lib/spamassassin/.spamassassin/auto-whitelist.lock: Permission denied 
>Aug 28 08:51:49 mickey spamd[1973]: spamd: identified spam (998.6/5.0) for root:496 in 0.3 seconds, 1488 bytes. 
>Aug 28 08:51:49 mickey spamd[1973]: spamd: result: Y 998 - ALL_TRUSTED,GTUBE scantime=0.3,size=1488,
>   user=root,uid=496,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=34037,
>   mid=<46D41A64.1040506@uga.edu>,autolearn=no 
>-----------------------------------------------------------------------------------------------
>Excerpt from /var/log/audit/audit.log:
>
>type=AVC msg=audit(1188305509.467:48): avc:  denied  { write } for  pid=1973
>   comm="spamd" name=".spamassassin" dev=dm-5 ino=360451
>   scontext=system_u:system_r:spamd_t:s0
>   tcontext=user_u:object_r:spamd_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1188305509.467:48): arch=40000003 syscall=5 success=no
>   exit=-13 a0=94d1908 a1=8241 a2=1b6 a3=8241 items=0 ppid=1926 pid=1973
>   auid=4294967295 uid=496 gid=495 euid=496 suid=496 fsuid=496 egid=495 sgid=495
>   fsgid=495 tty=(none) comm="spamd" exe="/usr/bin/perl"
>   subj=system_u:system_r:spamd_t:s0 key=(null)
>-----------------------------------------------------------------------------------------------
>[root@mickey audit]# tail /var/log/audit/audit.log | audit2why
>
>type=AVC msg=audit(1188305509.467:48): avc:  denied  { write } for  pid=1973
>   comm="spamd" name=".spamassassin" dev=dm-5 ino=360451
>   scontext=system_u:system_r:spamd_t:s0
>   tcontext=user_u:object_r:spamd_var_lib_t:s0 tclass=dir
>        Was caused by:
>                Missing or disabled TE allow rule.
>                Allow rules may exist but be disabled by boolean settings; check boolean settings.
>                You can see the necessary allow rules by running audit2allow with this audit message as input.
>-----------------------------------------------------------------------------------------------
>[root@mickey audit]# tail /var/log/audit/audit.log | audit2allow
>
>#============= spamd_t ==============
>allow spamd_t spamd_var_lib_t:dir write;
>-----------------------------------------------------------------------------------------------
>Contents of /etc/sysconfig/spamassassin:
>SPAMDOPTIONS="-d -x -m5 -P -u spamassassin"
>-----------------------------------------------------------------------------------------------
>Output of ls -Zar /var/lib/spamassassin
>
>drwxr-xr-x  spamassassin spamassassin user_u:object_r:spamd_var_lib_t    .spamassassin
>drwxr-xr-x  root         root         system_u:object_r:var_lib_t        ..
>drwxr-xr-x  spamassassin spamassassin system_u:object_r:spamd_var_lib_t  .
>-----------------------------------------------------------------------------------------------
>Contents of /etc/procmailrc:
>
>INCLUDERC=/etc/mail/spamassassin/spamassassin-spamc.rc
>-----------------------------------------------------------------------------------------------
>Contents of /etc/mail/spamassassin/spamassassin-spamc.rc
>
># send mail through spamassassin
>:0fw
>| /usr/bin/spamc
>-----------------------------------------------------------------------------------------------
>Output of chkconfig --list spamassassin
>
>spamassassin    0:off   1:off   2:on    3:on    4:on    5:on    6:off
>-----------------------------------------------------------------------------------------------
>
>-----------------------------------------------------------------------------------------------
>
>-----------------------------------------------------------------------------------------------

Actions: View

Attachments on bug 260201: 176541