Attachment 588563 Details for Bug 827568 – selinux dovecot imap alert details

selinux dovecot imap alert details

selinux.txt (text/plain), 2.36 KB, created by Roger Noble on 2012-06-01 19:05:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Roger Noble

Created: 2012-06-01 19:05:16 UTC

Size: 2.36 KB

patch

obsolete

>
>SELinux is preventing /usr/libexec/dovecot/imap from lock access on the file /home/rgn/Maildir/dovecot.index.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that imap should be allowed lock access on the dovecot.index file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep imap /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:dovecot_t:s0
>Target Context                system_u:object_r:mail_home_rw_t:s0
>Target Objects                /home/rgn/Maildir/dovecot.index [ file ]
>Source                        imap
>Source Path                   /usr/libexec/dovecot/imap
>Port                          <Unknown>
>Host                          flamsteed
>Source RPM Packages           dovecot-2.1.6-2.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-125.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Permissive
>Host Name                     flamsteed
>Platform                      Linux flamsteed 3.3.7-1.fc17.x86_64 #1 SMP Mon May
>                              21 22:32:19 UTC 2012 x86_64 x86_64
>Alert Count                   73
>First Seen                    Thu 31 May 2012 05:04:39 PM BST
>Last Seen                     Fri 01 Jun 2012 07:55:54 PM BST
>Local ID                      a5593ed6-18f6-499a-b7b1-377c7f3979e2
>
>Raw Audit Messages
>type=AVC msg=audit(1338576954.559:1417): avc:  denied  { lock } for  pid=2439 comm="imap" path="/home/rgn/Maildir/dovecot.index" dev="dm-2" ino=35929812 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:mail_home_rw_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1338576954.559:1417): arch=x86_64 syscall=fcntl success=yes exit=0 a0=c a1=7 a2=7fff89485a50 a3=100000008 items=0 ppid=2868 pid=2439 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm=imap exe=/usr/libexec/dovecot/imap subj=system_u:system_r:dovecot_t:s0 key=(null)
>
>Hash: imap,dovecot_t,mail_home_rw_t,file,lock
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 827568: 588563 | 591175