Bug 613971

This bug appears to have been reported against 'rawhide' during the Fedora 14 development cycle.
Changing version to '14'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Please remember than sa or sa commands are often ran in cron jobs and such a warning will translate in a cron notification mail each time one of those is ran

sa should never emit warnings on execution

spamassassin-3.3.2-0.1.svn1027144.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/spamassassin-3.3.2-0.1.svn1027144.fc14

spamassassin-3.3.2-0.1.svn1027144.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update spamassassin'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/spamassassin-3.3.2-0.1.svn1027144.fc14

After update this message is send from sa-update cron job daily:

Subject: Cron <root@work> /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a  
        /var/log/sa-update.log                                                  

/etc/sysconfig/sa-update: line 15: /etc/mail/spamassassin/channel.d/sought.conf:
Permission denied

Odd. If you run it manually from command line does it generate anything? 

ls -lZ /etc/mail/spamassassin/channel.d/sought.conf 

Any selinux denials?

(In reply to comment #6)
> Odd. If you run it manually from command line does it generate anything? 

Yes, same problem.

[root@work ondrejj]# /usr/share/spamassassin/sa-update.cron
/etc/sysconfig/sa-update: line 15: /etc/mail/spamassassin/channel.d/sought.conf: Permission denied

and no exit from this script for 5 minutes.

> ls -lZ /etc/mail/spamassassin/channel.d/sought.conf 

[ondrejj@work ~]$ ls -lZ /etc/mail/spamassassin/channel.d/sought.conf
-rw-r--r--. root root system_u:object_r:etc_mail_t:s0  /etc/mail/spamassassin/channel.d/sought.conf
[ondrejj@work ~]$ sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   permissive
Mode from config file:          permissive
Policy version:                 24
Policy from config file:        targeted
[ondrejj@work ~]$ ls -lZa /etc/mail/spamassassin/channel.d
drwxr-xr-x. root root system_u:object_r:etc_mail_t:s0  ./
drwxr-xr-x. root root system_u:object_r:etc_mail_t:s0  ../
-rw-r--r--. root root system_u:object_r:etc_mail_t:s0  sought.conf
-rw-r--r--. root root system_u:object_r:etc_mail_t:s0  spamassassin-official.conf

> Any selinux denials?

I use selinux only in permissive mode.

If you take a look at line 15 of /etc/sysconfig/sa-update you'll understand what is going on.  It is a line that is meant to be a comment, but the comment marker is gone.  The effect is that the script tries to EXECUTE /etc/mail/spamassassin/channel.d/sought.conf.  Which fails with permission denied of course, since the file isn't executable.

There is a spamassassin-3.3.2-0.2.svn1027144.fc14 in the pending state in bodhi, where the problem is fixed.  Unless I'm mistaken, that means a fix is on its way.

Update has been created in bodhi, can you please test spamassassin-3.3.2-0.2.svn1027144.fc14 and provide karma in bodhi if this fixes your issue?  If we get 2 more positive karma we can go ahead and push it to stable.

> can you please test spamassassin-3.3.2-0.2.svn1027144.fc14

But it hasn't reached updates-testing yet, has it?

No, i just requested it to be pushed there.  You can install it from http://kojipkgs.fedoraproject.org/packages/spamassassin/3.3.2/0.2.svn1027144.fc14/ (or wait for it to hit updates-testing)

spamassassin-3.3.2-0.2.svn1027144.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update spamassassin'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/spamassassin-3.3.2-0.2.svn1027144.fc14

spamassassin-3.3.2-0.2.svn1027144.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.