Fedora Account System
Red Hat Associate
Red Hat Customer
This is related to the switch from libdb, bug 1781181. Reproducible: Always Steps to Reproduce: 1. build sendmail-8.17.2-4.fc40 --without db 2. dnf install sendmail 3. systemctl start sendmail Actual Results: type=AVC msg=audit(1698951288.478:495): avc: denied { map } for pid=5622 comm="sendmail" path="/etc/mail/access.cdb" dev="vda1" ino=37756176 scontext=system_u:system_r:sendmail_t:s0 tcontext=unconfined_u:object_r:etc_mail_t:s0 tclass=file permissive=1 Expected Results: No AVC It also needs full R/W/CREATE/MAP access to: /etc/mail/bitdomain.cdb /etc/mail/uudomain.cdb /etc/mail/genericstable.cdb /etc/mail/userdb.cdb /etc/mail/authinfo.cdb /etc/mail/virtusertable.cdb /etc/mail/access.cdb /etc/mail/domaintable.cdb /etc/mail/mailertable.cdb /etc/aliases.cdb It already should have full access to the *.db variant of the above files. The above mentioned AVC was the only AVC I was able to get from it when running simple sanity tests.
This bug appears to have been reported against 'rawhide' during the Fedora Linux 40 development cycle. Changing version to 40.
FEDORA-2024-995d585c91 (selinux-policy-40.27-1.fc40) has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-995d585c91
FEDORA-2024-995d585c91 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-995d585c91` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-995d585c91 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-995d585c91 (selinux-policy-40.27-1.fc40) has been pushed to the Fedora 40 stable repository. If problem still persists, please make note of it in this bug report.