Bug 216064

Summary: procmail avc's
Product: [Fedora] Fedora Reporter: Dave Jones <davej>
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED NOTABUG QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: 6CC: pfrields
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-11-17 18:04:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Dave Jones 2006-11-17 02:07:19 UTC
I have my ~/Mail symlinked to /mnt/raid/Mail.
I guess this makes policy unhappy, as I have a ton of these..


audit(1163322126.028:4): avc:  denied  { search } for  pid=27344 comm="procmail"
name="mnt" dev=md0 ino=64323585 scontext=system_u:system_r:procmail_t:s0
tcontext=system_u:object_r:mnt_t:s0 tclass=dir
audit(1163667725.468:47): avc:  denied  { search } for  pid=10093 comm="formail"
name="mnt" dev=md0 ino=64323585 scontext=system
_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir

I get a bunch of those every time cron.daily runs at 4am.

Comment 1 Daniel Walsh 2006-11-17 18:04:52 UTC
Yes this is a local customization.  You should run 
grep procmail /var/log/audit/audit.log | audit2allow -M myprocmail 
Then load the the custom policy.