Bug 453245

Summary: SELinux is preventing sendmail (exim_t) "getattr" to pipe (system_crond_t).
Product: [Fedora] Fedora Reporter: Frank Murphy <sysoutfran>
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: low    
Version: 9   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Current Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-08-01 16:11:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
selinux alert none

Description Frank Murphy 2008-06-28 10:19:52 UTC 
Description of problem: 
SELinux denied access requested by sendmai (exim)


Version-Release number of selected component (if applicable):
policycoreutils-2.0.49-3.fc9.i386
policycoreutils-gui-2.0.49-3.fc9.i386
selinux-policy-targeted-3.3.1-69.fc9.noarch
selinux-policy-3.3.1-69.fc9.noarch
checkpolicy-2.0.14-1.fc9.i386
libselinux-2.0.64-2.fc9.i386
libselinux-python-2.0.64-2.fc9.i386



How reproducible:
Always

Steps to Reproduce:
1. send log(s) to isp email
2.
3.
  
Actual results:
avc denial

Expected results:
sucessful send

Additional info: it said please file a bug hence "new bug"
Comment 1 Frank Murphy 2008-06-28 10:19:52 UTC 
Created attachment 310495 [details]
selinux alert
Comment 2 Daniel Walsh 2008-06-30 18:00:30 UTC 
You can allow this for now.

# audit2allow -M mypol -l -i /var/log/audit/audit.log
# semodule -i mypol.pp

Fixed in selinux-policy-3.3.1-73.fc9.noarch
Comment 3 Frank Murphy 2008-08-01 16:08:44 UTC 
Verified Fixed