Bug 253742
Summary: | sendmail and cfengine issues. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Orion Poplawski <orion> |
Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | 8 | Keywords: | Reopened |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | 3.0.8-95.fc8 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-03-27 23:07:11 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Orion Poplawski
2007-08-21 17:31:06 UTC
Fixed in selinux-policy-3.0.7-8.fc8.src.rpm ALready fixed in rawhide Still seeing denials with the output of commands run by cfengine trying to get logged: Feb 7 15:00:29 ranier kernel: audit(1202421629.349:5): avc: denied { write } for pid=5376 comm="newaliases" path="/var/cfengine/outputs/cf_ranier_cora_nwra_com_2008-02-07--15-00-04" dev=dm-2 ino=229508 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file Perhaps /var/cfengine/outputs should get labeled var_log_t? selinux-policy-3.0.8-81.fc8 This is a simple redirection of stdout. newaliases output is being redirected to the cfengine log file. This log file should probably be in var_log. (In reply to comment #4) > This is a simple redirection of stdout. newaliases output is being redirected > to the cfengine log file. This log file should probably be in var_log. Agreed, but I think it will take a while to get cfengine FHS compliant. In the meantime, can we get /var/cfengine/outputs labeled as var_log_t? It's equivalent to /var/log/cfengine. Fixed in selinux-policy-3.0.8-95.fc8 Confirmed fixed. Thanks! |