Bug 1212108
| Summary: | SELinux is preventing esmtp from 'getattr' accesses on the file /.esmtp_queue/Yb3B7ty2/mail. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Daniel Fernando <daniel.f.m.soares> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 21 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:42e54e5214362d2798de3ce3390bb197cc2a6361312a219a76e40eef17c699f4 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-04-16 18:13:39 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Please follow, ***** Plugin restorecon (99.5 confidence) suggests ************************ If você deseja reparar este rótulo. /.esmtp_queue/Yb3B7ty2/mail rótulo padrão deve ser default_t. Then você pode executar o restorecon. Do # /sbin/restorecon -v /.esmtp_queue/Yb3B7ty2/mail |
Description of problem: SELinux is preventing esmtp from 'getattr' accesses on the file /.esmtp_queue/Yb3B7ty2/mail. ***** Plugin restorecon (99.5 confidence) suggests ************************ If você deseja reparar este rótulo. /.esmtp_queue/Yb3B7ty2/mail rótulo padrão deve ser default_t. Then você pode executar o restorecon. Do # /sbin/restorecon -v /.esmtp_queue/Yb3B7ty2/mail ***** Plugin catchall (1.49 confidence) suggests ************************** If você acredita que o esmtp deva ser permitido acesso de getattr em mail file por default. Then você precisa reportar este como um erro. Você pode gerar um módulo de política local para permitir este acesso. Do permitir este acesso agora executando: # grep esmtp /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:system_mail_t:s0-s0:c0.c1023 Target Context system_u:object_r:root_t:s0 Target Objects /.esmtp_queue/Yb3B7ty2/mail [ file ] Source esmtp Source Path esmtp Port <Unknown> Host (removed) Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-105.11.fc21.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 3.19.3-200.fc21.x86_64 #1 SMP Thu Mar 26 21:39:42 UTC 2015 x86_64 x86_64 Alert Count 60 First Seen 2015-04-05 12:00:07 BRT Last Seen 2015-04-14 21:02:46 BRT Local ID 5bf7db40-6225-496d-a242-4e7b2fe11202 Raw Audit Messages type=AVC msg=audit(1429056166.730:1295): avc: denied { getattr } for pid=29353 comm="esmtp" path="/.esmtp_queue/Yb3B7ty2/mail" dev="dm-1" ino=787839 scontext=system_u:system_r:system_mail_t:s0-s0:c0.c1023 tcontext=system_u:object_r:root_t:s0 tclass=file permissive=1 Hash: esmtp,system_mail_t,root_t,file,getattr Version-Release number of selected component: selinux-policy-3.13.1-105.11.fc21.noarch Additional info: reporter: libreport-2.3.0 hashmarkername: setroubleshoot kernel: 3.19.3-200.fc21.x86_64 type: libreport