Description of problem: After installing selinux-policy-3.14.1-30.fc28.noarch and kernel-4.16.12-300.fc28.x86_64 (sorry, not sure what broke it), cyrus-imapd now fails to start. restorecon -R -v /run does nothing to fix it. Current work-around is running with setenforce 0. Which is a shame because exim *just* got fixed, which is why I rebooted with enforce turned back on and found this problem. Log entries look like: May 30 15:32:55 catbox.zlynx.org audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? ter minal=? res=success' May 30 15:32:55 catbox.zlynx.org audit[1372]: AVC avc: denied { dac_override } for pid=1372 comm="master" capability=1 scontext=system_u:system_r:cyrus_t:s0 tcontext=system_u:system_r:cyrus_t:s0 tclass=capability permissive=0 May 30 15:32:55 catbox.zlynx.org cyrus/master[1372]: unable to bind to lmtpunix/unix socket: Permission denied May 30 15:32:55 catbox.zlynx.org cyrus/master[1372]: unable to create lmtpunix listener socket: Permission denied May 30 15:32:57 catbox.zlynx.org audit[1630]: AVC avc: denied { map } for pid=1630 comm="imapd" path="/run/cyrus/db/tls_sessions.db" dev="tmpfs" ino=36646 scontext=system_u:system_r:cyrus_t:s0 tcontext=system_u:object_r:cyrus_var_run_t:s0 tclass=file permissive=0 May 30 15:32:57 catbox.zlynx.org cyrus/imaps[1628]: inittls: Loading hard-coded DH parameters May 30 15:32:57 catbox.zlynx.org cyrus/imaps[1630]: IOERROR: mapping /run/cyrus/db/tls_sessions.db file: Permission denied May 30 15:32:57 catbox.zlynx.org cyrus/imaps[1630]: Fatal error: failed to mmap /run/cyrus/db/tls_sessions.db file May 30 15:32:57 catbox.zlynx.org audit[1628]: AVC avc: denied { map } for pid=1628 comm="imapd" path="/run/cyrus/db/tls_sessions.db" dev="tmpfs" ino=36646 scontext=system_u:system_r:cyrus_t:s0 tcontext=system_u:object_r:cyrus_var_run_t:s0 tclass=file permissive=0 May 30 15:32:57 catbox.zlynx.org cyrus/imaps[1628]: IOERROR: mapping /run/cyrus/db/tls_sessions.db file: Permission denied May 30 15:32:57 catbox.zlynx.org cyrus/imaps[1628]: Fatal error: failed to mmap /run/cyrus/db/tls_sessions.db file Version-Release number of selected component (if applicable): kernel-4.16.12-300.fc28.x86_64 selinux-policy-3.14.1-30.fc28.noarch
Hello, Thank you for the report. This is known issue in selinux policy and Lukas has fix for it already. Moving to Selinux
selinux-policy-3.14.1-32.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-743a9247de
selinux-policy-3.14.1-32.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-743a9247de
selinux-policy-3.14.1-32.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.