Bug 2247985
| Summary: | SELinux is preventing sendmail from 'read' accesses on the cartella FIzHzwwp. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Davide Repetto <red> | ||||||
| Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 39 | CC: | dwalsh, lvrabec, mmalik, nknazeko, omosnacek, pkoncity, red, vmojzis, zpytela | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | abrt_hash:95d36e7252e81b6da8514497f83a4b04e2caa34deeb20988c6ea1c098488ad4c;VARIANT_ID=matecompiz; | ||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2023-11-06 09:09:38 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 1997213 [details]
File: description
Created attachment 1997214 [details]
File: os_info
*** This bug has been marked as a duplicate of bug 2247977 *** |
Description of problem: SELinux is preventing sendmail from 'read' accesses on the cartella FIzHzwwp. ***** Plugin catchall (100. confidence) suggests ************************** Se ci credi sendmail dovrebbe essere consentito read accesso al FIzHzwwp directory per impostazione predefinita. Then si dovrebbe riportare il problema come bug. E' possibile generare un modulo di politica locale per consentire questo accesso. Do consentire questo accesso per ora eseguendo: # ausearch -c 'sendmail' --raw | audit2allow -M my-$MODULE_NOME # semodule -X 300 -i miei-sendmail.pp Additional Information: Source Context system_u:system_r:system_mail_t:s0 Target Context system_u:object_r:ddclient_var_t:s0 Target Objects FIzHzwwp [ dir ] Source sendmail Source Path sendmail Port <Sconosciuto> Host (removed) Source RPM Packages Target RPM Packages SELinux Policy RPM selinux-policy-targeted-38.29-1.fc39.noarch Local Policy RPM selinux-policy-targeted-38.29-1.fc39.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 6.5.9-300.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Oct 25 21:39:20 UTC 2023 x86_64 Alert Count 12 First Seen 2023-11-04 20:24:36 CET Last Seen 2023-11-05 09:59:27 CET Local ID 54fe9a80-29f3-4d96-8e32-43140b41fd10 Raw Audit Messages type=AVC msg=audit(1699174767.668:1411): avc: denied { read } for pid=129972 comm="sendmail" name="FIzHzwwp" dev="sde4" ino=18739730 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:ddclient_var_t:s0 tclass=dir permissive=1 Hash: sendmail,system_mail_t,ddclient_var_t,dir,read Version-Release number of selected component: selinux-policy-targeted-38.29-1.fc39.noarch Additional info: reporter: libreport-2.17.11 reason: SELinux is preventing sendmail from 'read' accesses on the cartella FIzHzwwp. package: selinux-policy-targeted-38.29-1.fc39.noarch component: selinux-policy hashmarkername: setroubleshoot type: libreport kernel: 6.5.9-300.fc39.x86_64 component: selinux-policy