Bug 637843

Summary: spamc denials
Product: Red Hat Enterprise Linux 5 Reporter: Nalin Dahyabhai <nalin>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Milos Malik <mmalik>
Severity: medium Docs Contact:
Priority: low    
Version: 5.5CC: dpal, dwalsh, jplans, mmalik, orion, syeghiay
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-2.4.6-286.el5 Doc Type: Bug Fix
Doc Text:
Prior to this update, several messages were written to the audit log when Sendmail leaked file descriptors. To prevent this, the SELinux policy has been corrected, and these events are no longer logged.
Story Points: ---
Clone Of: 500397 Environment:
Last Closed: 2011-01-13 21:50:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On:    
Bug Blocks: 500397    

Comment 2 Miroslav Grepl 2010-10-01 07:21:03 UTC
RHEL5.6 selinux-policy already has 

sendmail_rw_pipes(spamc_t)


I will add

sendmail_dontaudit_rw_unix_stream_sockets(spamc_t)

Comment 3 Miroslav Grepl 2010-10-01 09:09:10 UTC
Fixed in selinux-policy-2.4.6-286.el5.noarch.

Comment 6 Jaromir Hradilek 2011-01-05 16:21:23 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Prior to this update, several messages were written to the audit log when Sendmail leaked file descriptors. To prevent this, the SELinux policy has been corrected, and these events are no longer logged.

Comment 8 errata-xmlrpc 2011-01-13 21:50:32 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0026.html