Attachment 312351 Details for Bug 456255 – 2nd troubleshooter log

2nd troubleshooter log

selinux_alert2.txt (text/plain), 2.49 KB, created by Phil Moors on 2008-07-22 14:36:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Phil Moors

Created: 2008-07-22 14:36:53 UTC

Size: 2.49 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing sendmail (system_mail_t) "name_bind" to <Unknown>
>(smtp_port_t).
>
>Detailed Description:
>
>SELinux denied access requested by sendmail. It is not expected that this access
>is required by sendmail and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:system_mail_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:smtp_port_t:s0
>Target Objects                None [ tcp_socket ]
>Source                        sendmail
>Source Path                   /usr/sbin/sendmail.sendmail
>Port                          25
>Host                          reddwarf
>Source RPM Packages           sendmail-8.14.2-4.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-78.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall
>Host Name                     reddwarf
>Platform                      Linux reddwarf 2.6.25.10-86.fc9.x86_64 #1 SMP Mon
>                              Jul 7 20:23:46 EDT 2008 x86_64 x86_64
>Alert Count                   5
>First Seen                    Fri 18 Jul 2008 04:04:23 AM EDT
>Last Seen                     Tue 22 Jul 2008 04:04:25 AM EDT
>Local ID                      4732a3f3-0a6f-48a9-a579-6e10ebb9a76d
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=reddwarf type=AVC msg=audit(1216713865.495:1171): avc:  denied  { name_bind } for  pid=15067 comm="sendmail" src=25 scontext=system_u:system_r:system_mail_t:s0-s0:c0.c1023 tcontext=system_u:object_r:smtp_port_t:s0 tclass=tcp_socket
>
>host=reddwarf type=SYSCALL msg=audit(1216713865.495:1171): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=7feb7aff2744 a2=10 a3=7fff82d5e4c0 items=0 ppid=1 pid=15067 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) ses=154 comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 456255: 312350 | 312351