| Summary: | Policy for confining the mlmmj mailing list manager along with Postfix | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Jan Kundrát <jkt> | ||||||
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> | ||||||
| Status: | CLOSED INSUFFICIENT_DATA | QA Contact: | Milos Malik <mmalik> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 6.1 | CC: | dwalsh, mmalik | ||||||
| Target Milestone: | rc | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2013-08-07 11:34:59 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Attachments: |
|
||||||||
Created attachment 558923 [details]
mlmmj.te
Jan, could you send me AVC msgs which are used for mlmmj policy? This request was not resolved in time for the current release. Red Hat invites you to ask your support representative to propose this request, if still desired, for consideration in the next release of Red Hat Enterprise Linux. This request was erroneously removed from consideration in Red Hat Enterprise Linux 6.4, which is currently under development. This request will be evaluated for inclusion in Red Hat Enterprise Linux 6.4. |
Created attachment 558922 [details] mlmmj.fc mlmmj-1.2.17.1-1.el6.x86_64 from EPEL doesn't work out-of-box when combined with Postfix. One of the AVC denials is the following: time->Tue Jan 31 19:15:14 2012 type=SYSCALL msg=audit(1328033714.420:15171): arch=c000003e syscall=2 success=no exit=-13 a0=204f100 a1=c2 a2=180 a3=36 items=0 ppid=2721 pid=2722 auid=4294967295 uid=500 gid=501 euid=500 suid=500 fsuid=500 egid=501 sgid=501 fsgid=501 tty=(none) ses=4294967295 comm="mlmmj-recieve" exe="/usr/bin/mlmmj-recieve" subj=system_u:system_r:postfix_pipe_t:s0 key=(null) type=AVC msg=audit(1328033714.420:15171): avc: denied { write } for pid=2722 comm="mlmmj-recieve" name="incoming" dev=xvda1 ino=1156252 scontext=system_u:system_r:postfix_pipe_t:s0 tcontext=system_u:object_r:postfix_spool_t:s0 tclass=dir Dominick Grift on IRC was able to provide a usable policy for confining mlmmj properly. The files are attached.