Bug 2365509 - SELinux is preventing mail from 'create' accesses on the Datei dead.letter.
Summary: SELinux is preventing mail from 'create' accesses on the Datei dead.letter.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: smartmontools
Version: 41
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michal Hlavinka
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:0c0121cb2a156152b8134c29641...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-11 08:43 UTC by Alex. H. F.
Modified: 2025-09-25 00:15 UTC (History)
3 users (show)

Fixed In Version: smartmontools-7.5-3.fc41 smartmontools-7.5-4.fc43
Clone Of:
Environment:
Last Closed: 2025-09-14 01:35:12 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: description (1.89 KB, text/plain)
2025-05-11 08:43 UTC, Alex. H. F.
no flags Details
File: os_info (726 bytes, text/plain)
2025-05-11 08:43 UTC, Alex. H. F.
no flags Details

Description Alex. H. F. 2025-05-11 08:43:04 UTC
Description of problem:
SELinux is preventing mail from 'create' accesses on the Datei dead.letter.

*****  Plugin catchall (100. confidence) suggests   **************************

Wenn Sie denken, dass es mail standardmäßig erlaubt sein sollte, create Zugriff auf dead.letter file zu erhalten.
Then sie sollten dies als Fehler melden.
Um diesen Zugriff zu erlauben, können Sie ein lokales Richtlinien-Modul erstellen.
Do
zugriff jetzt erlauben, indem Sie die nachfolgenden Befehle ausführen:
# ausearch -c 'mail' --raw | audit2allow -M my-mail
# semodule -X 300 -i my-mail.pp

Additional Information:
Source Context                system_u:system_r:smartdwarn_t:s0
Target Context                system_u:object_r:admin_home_t:s0
Target Objects                dead.letter [ file ]
Source                        mail
Source Path                   mail
Port                          <Unbekannt>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-41.38-1.fc41.noarch
Local Policy RPM              smartmontools-selinux-7.5-1.fc41.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 6.14.5-200.fc41.x86_64 #1 SMP
                              PREEMPT_DYNAMIC Fri May 2 14:06:21 UTC 2025 x86_64
Alert Count                   1
First Seen                    2025-05-10 19:10:46 CEST
Last Seen                     2025-05-10 19:10:46 CEST
Local ID                      df7a7ff9-5efc-4da3-90d8-6f120df4d3be

Raw Audit Messages
type=AVC msg=audit(1746897046.442:259): avc:  denied  { create } for  pid=166358 comm="mail" name="dead.letter" scontext=system_u:system_r:smartdwarn_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=file permissive=0


Hash: mail,smartdwarn_t,admin_home_t,file,create

Version-Release number of selected component:
selinux-policy-targeted-41.38-1.fc41.noarch

Additional info:
reporter:       libreport-2.17.15
reason:         SELinux is preventing mail from 'create' accesses on the Datei dead.letter.
kernel:         6.14.5-200.fc41.x86_64
package:        selinux-policy-targeted-41.38-1.fc41.noarch
hashmarkername: setroubleshoot
type:           libreport
component:      smartmontools
component:      smartmontools

Comment 1 Alex. H. F. 2025-05-11 08:43:07 UTC
Created attachment 2089340 [details]
File: description

Comment 2 Alex. H. F. 2025-05-11 08:43:08 UTC
Created attachment 2089341 [details]
File: os_info

Comment 3 Fedora Update System 2025-09-09 10:26:28 UTC
FEDORA-2025-acc76b757e (smartmontools-7.5-4.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-acc76b757e

Comment 4 Fedora Update System 2025-09-09 10:26:29 UTC
FEDORA-2025-7a8bdaf91e (smartmontools-7.5-3.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-7a8bdaf91e

Comment 5 Fedora Update System 2025-09-10 01:37:01 UTC
FEDORA-2025-acc76b757e has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-acc76b757e`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-acc76b757e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2025-09-10 02:41:07 UTC
FEDORA-2025-7a8bdaf91e has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7a8bdaf91e`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-7a8bdaf91e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-09-14 01:35:12 UTC
FEDORA-2025-7a8bdaf91e (smartmontools-7.5-3.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2025-09-25 00:15:52 UTC
FEDORA-2025-acc76b757e (smartmontools-7.5-4.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.