Bug 553277

Summary:	regression in selinux-policy-2.4.6-255.el5_4.3 breaks postfix /usr/sbin/sendmail interface
Product:	Red Hat Enterprise Linux 5	Reporter:	Tuomo Soini <tis>
Component:	selinux-policy	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED DUPLICATE	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	high	Docs Contact:
Priority:	low
Version:	5.4.z	CC:	andri, bugzilla.redhat, dave-bugzilla, dwalsh, rhel, segvfault
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-01-09 13:50:44 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tuomo Soini 2010-01-07 15:07:28 UTC

Description of problem:

selinux-policy-2.4.6-255.el5_4.3 breaks postfix /usr/sbin/sendmail interface

Version-Release number of selected component (if applicable):

2.4.6-255.el5_4.3

How reproducible:

Always

Steps to Reproduce:
1. update selinux-policy to 2.4.6-255.el5_4.3
2. try to send mail via /usr/sbin/sendmail (postfix)
3. Mail send doesn't work.
  
Additional info:

Reverting this change fixes problem:

--- serefpolicy-2.4.6.old/policy/modules/services/postfix.te    2010-01-07 16:16:14.000000000 +0200
+++ serefpolicy-2.4.6.new/policy/modules/services/postfix.te    2010-01-07 16:16:59.000000000 +0200
@@ -548,7 +548,7 @@
 ')
 
 optional_policy(`
-       sendmail_rw_unix_stream_sockets(postfix_postdrop_t)
+    sendmail_dontaudit_rw_unix_stream_sockets(postfix_postdrop_t)
 ')
 
 optional_policy(`

Comment 1 Daniel Walsh 2010-01-07 15:25:36 UTC

I don't have a problem with that.  Not sure why the change was made.

Comment 2 Section1 2010-01-09 00:01:44 UTC

I have same problem:

selinux-policy-2.4.6-255.el5_4.3
postfix-2.3.3-2.1.el5_2
mailx-8.1.1-44.2.2

If i disable SELinux works fine ...but if its enable i get:

# mail root
Subject: test
test
.
Cc: 
send-mail: warning: premature end-of-input on /usr/sbin/postdrop -r while reading input attribute name
send-mail: fatal: root(0): unable to execute /usr/sbin/postdrop -r: Success

and in audit.log i dont see any entry about this

Postfix work good with SELinux enabled i can receive and send mails with mail clients

Comment 3 GV 2010-01-09 11:03:18 UTC

I also have the same problem:

postfix/sendmail[20232]: warning: premature end-of-input on /usr/sbin/postdrop -r while reading input attribute name
postfix/sendmail[20232]: fatal: gabriel(532): unable to execute /usr/sbin/postdrop -r: Success

I lost all mail forwarded with procmail.

Gabriel

Comment 4 Daniel Walsh 2010-01-09 13:50:44 UTC

I have posted a fix for this in the duplicate.

*** This bug has been marked as a duplicate of bug 553492 ***