Bug 379691

Summary: SELinux prevents /usr/sbin/postmap from being run
Product: [Fedora] Fedora Reporter: Nils Philippsen <nphilipp>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: 8CC: twoerner
Target Milestone: ---Keywords: Regression
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Current Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-01-30 19:19:39 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Nils Philippsen 2007-11-13 10:53:05 UTC 
Description of problem:

SSIA

Version-Release number of selected component (if applicable):
selinux-policy-3.0.8-52.fc8
selinux-policy-targeted-3.0.8-52.fc8
postfix-2.4.5-2.fc8

How reproducible:
Always

Steps to Reproduce:

root@wombat:~> setenforce 1
root@wombat:~> postmap
-bash: /usr/sbin/postmap: Permission denied
root@wombat:~> ls -lZ /usr/sbin/postmap
-rwxr-xr-x  root root system_u:object_r:postfix_map_exec_t:s0 /usr/sbin/postmap
root@wombat:~> restorecon -v -F /usr/sbin/postmap
restorecon reset /usr/sbin/postmap context
system_u:object_r:postfix_map_exec_t:s0->system_u:object_r:postfix_map_exec_t:s0
root@wombat:~> postmap
-bash: /usr/sbin/postmap: Permission denied
root@wombat:~> setenforce 0
root@wombat:~> postmap
postmap: fatal: usage: postmap [-Nfinoprsvw] [-c config_dir] [-d key] [-q key]
[map_type:]file...
  
Actual results:
postmap can't be executed in enforcing mode

Expected results:
postmap can be executed in enforcing mode

Additional info:
I don't get any notifications via setroubleshoot about this.
Comment 1 Daniel Walsh 2007-11-13 19:39:02 UTC 
Fixed in selinux-policy-3.0.8-54.fc8
Comment 2 Daniel Walsh 2008-01-30 19:19:39 UTC 
Bulk closing all bugs in Fedora updates in the modified state.  If you bug is
not fixed, please reopen.