I get this kind of errors from time to time. I also see some mislabelled files. # restorecon -F -r -v /var/spool/postfix restorecon reset /var/spool/postfix/deferred/D/D1A851407FC context system_u:object_r:postfix_spool_t:s0->system_u:object_r:postfix_spool_maildrop_t:s0 --- SELinux is preventing error from 'read, write' accesses on the file /var/spool/postfix/deferred/A/A1FA514027D. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that error should be allowed read write access on the A1FA514027D file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep error /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:postfix_master_t:s0 Target Context system_u:object_r:postfix_spool_maildrop_t:s0 Target Objects /var/spool/postfix/deferred/A/A1FA514027D [ file ] Source error Source Path error Port <Unknown> Host <removed> Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-105.3.fc21.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name <removed> Platform Linux <removed> 3.18.6-200.fc21.x86_64 #1 SMP Fri Feb 6 22:59:42 UTC 2015 x86_64 x86_64 Alert Count 1 First Seen 2015-02-18 09:13:39 CET Last Seen 2015-02-18 09:13:39 CET Local ID 654b0417-53bf-4e50-989d-79d81ce5212f Raw Audit Messages type=AVC msg=audit(1424247219.475:432): avc: denied { read write } for pid=2096 comm="error" name="A1FA514027D" dev="dm-1" ino=1311357 scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:object_r:postfix_spool_maildrop_t:s0 tclass=file permissive=0 Hash: error,postfix_master_t,postfix_spool_maildrop_t,file,read,write
I'm seeing this on a f21 installation as well. Let me know if you need any info Regards Stuart
commit 9eb42302823b730a1d221bb19e6fdd348f68d916 Author: Lukas Vrabec <lvrabec> Date: Tue Apr 7 12:16:31 2015 +0200 Merge postfix spool types(maildrop,flush) to one postfix_spool_t
selinux-policy-3.13.1-105.13.fc21 has been submitted as an update for Fedora 21. https://admin.fedoraproject.org/updates/selinux-policy-3.13.1-105.13.fc21
Package selinux-policy-3.13.1-105.13.fc21: * should fix your issue, * was pushed to the Fedora 21 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.13.1-105.13.fc21' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2015-6316/selinux-policy-3.13.1-105.13.fc21 then log in and leave karma (feedback).
selinux-policy-3.13.1-105.13.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.