Bug 168027
| Summary: | smtp to sendmail from network prevented when setenforce=1 | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Steve Kramer <bugzilla> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED NOTABUG | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2005-09-24 16:42:59 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Steve Kramer
2005-09-11 01:46:14 UTC
What avc messages are you seeing in /var/log/messages or /var/log/audit/audit.log? Dan There are no entries in either /var/log/messages or /var/log/audit/audit.log . --steve Can you ps -eZ | grep sendmail Do you have policy sources installed? If yes could you do a cd /etc/selinux/targeted/src/policy make enabledaudit; make load Then see if there are any avc messages? Here's the data, but after the elapsed time, and yum updates, the sendmail problem went away. You can close this bug. # # ps -eZ|grep sendmail system_u:system_r:kernel_t 3352 ? 00:00:00 sendmail-milter system_u:system_r:kernel_t 3367 ? 00:00:00 sendmail system_u:system_r:kernel_t 3373 ? 00:00:00 sendmail # # make enableaudit; make load grep -v dontaudit policy.conf > policy.audit mv policy.audit policy.conf Compiling policy ... /usr/bin/checkpolicy -o /etc/selinux/targeted/policy/policy.19 policy.conf /usr/bin/checkpolicy: loading policy configuration from policy.conf security: 3 users, 6 roles, 872 types, 101 bools security: 55 classes, 203038 rules /usr/bin/checkpolicy: policy configuration loaded /usr/bin/checkpolicy: writing binary representation (version 19) to /etc/selinux/targeted/policy/policy.19 Loading Policy ... /usr/sbin/load_policy /etc/selinux/targeted/policy/policy.19 touch tmp/load install -m 644 tmp/system.users /etc/selinux/targeted/users/system.users install -m 644 tmp/customizable_types /etc/selinux/targeted/contexts/customizable_types install -m 644 tmp/port_types /etc/selinux/targeted/contexts/port_types Installing file contexts files... install -m 644 file_contexts/homedir_template /etc/selinux/targeted/contexts/files/homedir_template install -m 644 file_contexts/file_contexts /etc/selinux/targeted/contexts/files/file_contexts # Here are avc messages from /var/log/messages: Sep 24 12:26:44 bastion kernel: security: 9 users, 6 roles, 872 types, 101 bools Sep 24 12:26:44 bastion kernel: security: 55 classes, 203038 rules Sep 24 12:26:44 bastion dbus: avc: received policyload notice (seqno=8) Sep 24 12:26:44 bastion dbus: avc: 0 AV entries and 0/512 buckets used, longest chain length 0 Sep 24 12:26:44 bastion dbus: avc: received policyload notice (seqno=8) Sep 24 12:26:44 bastion dbus: avc: 1 AV entries and 1/512 buckets used, longest chain length 1 Sep 24 12:26:44 bastion dbus: avc: received policyload notice (seqno=8) Sep 24 12:26:44 bastion dbus: avc: 0 AV entries and 0/512 buckets used, longest chain length 0 Sep 24 12:26:44 bastion dbus: avc: received policyload notice (seqno=8) Sep 24 12:26:44 bastion dbus: avc: 0 AV entries and 0/512 buckets used, longest chain length 0 Sep 24 12:26:44 bastion dbus: avc: received policyload notice (seqno=8) Sep 24 12:26:44 bastion dbus: avc: 0 AV entries and 0/512 buckets used, longest chain length 0 From /var/log/audit/audit.log: type=SYSCALL msg=audit(1127579204.347:13258799): arch=40000003 syscall=4 success=yes exit=5801251 a0=4 a1=b7286008 a2=588523 a3=bfae0fbc items=0 pid=30546 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="load_policy" exe="/usr/sbin/load_policy" |