Attachment 310239 Details for Bug 452811 – Sendmail Alert Mislabeled Files

Sendmail Alert Mislabeled Files

selinux_alert.txt (text/plain), 3.17 KB, created by Joe Fain Sr on 2008-06-25 09:03:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joe Fain Sr

Created: 2008-06-25 09:03:51 UTC

Size: 3.17 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing the sendmail from using potentially mislabeled files
>(2F746D702F2E4E5350522D41464D2D363336332D3261616263383066633837302E30202864656C6574656429).
>
>Detailed Description:
>
>SELinux has denied sendmail access to potentially mislabeled file(s)
>(2F746D702F2E4E5350522D41464D2D363336332D3261616263383066633837302E30202864656C6574656429).
>This means that SELinux will not allow sendmail to use these files. It is common
>for users to edit files in their home directory or tmp directories and then move
>(mv) them to system directories. The problem is that the files end up with the
>wrong file context which confined applications are not allowed to access.
>
>Allowing Access:
>
>If you want sendmail to access this files, you need to relabel them using
>restorecon -v
>'2F746D702F2E4E5350522D41464D2D363336332D3261616263383066633837302E30202864656C6574656429'.
>You might want to relabel the entire directory using restorecon -R -v ''.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_mail_t
>Target Context                system_u:object_r:httpd_tmp_t
>Target Objects                2F746D702F2E4E5350522D41464D2D363336332D3261616263
>                              383066633837302E30202864656C6574656429 [ file ]
>Source                        sendmail
>Source Path                   /usr/sbin/sendmail.sendmail
>Port                          <Unknown>
>Host                          LS1000.tmch.com
>Source RPM Packages           sendmail-8.13.8-2.el5
>Target RPM Packages           
>Policy RPM                    selinux-policy-2.4.6-137.el5
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   home_tmp_bad_labels
>Host Name                     LS1000.tmch.com
>Platform                      Linux LS1000.tmch.com 2.6.18-92.1.1.el5 #1 SMP Thu
>                              May 22 09:01:47 EDT 2008 x86_64 x86_64
>Alert Count                   2
>First Seen                    Mon 23 Jun 2008 02:40:26 PM CDT
>Last Seen                     Mon 23 Jun 2008 02:40:27 PM CDT
>Local ID                      413eb782-5b3f-4543-a9f3-ceee3ad22e54
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=LS1000.tmch.com type=AVC msg=audit(1214250027.124:570): avc:  denied  { read write } for  pid=32570 comm="sendmail" path=2F746D702F2E4E5350522D41464D2D363336332D3261616263383066633837302E30202864656C6574656429 dev=dm-2 ino=98310 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:httpd_tmp_t:s0 tclass=file
>
>host=LS1000.tmch.com type=AVC msg=audit(1214250027.124:570): avc:  denied  { read } for  pid=32570 comm="sendmail" path="eventpoll:[347445]" dev=eventpollfs ino=347445 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:system_r:httpd_t:s0 tclass=file
>
>host=LS1000.tmch.com type=SYSCALL msg=audit(1214250027.124:570): arch=c000003e syscall=59 success=yes exit=0 a0=18357d70 a1=18357de0 a2=18356d00 a3=3 items=0 ppid=15844 pid=32570 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=51 sgid=51 fsgid=51 tty=(none) ses=4294967295 comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 452811: 310239