Bug 2367736 - selinux blocks sending an failure report
Summary: selinux blocks sending an failure report
Keywords:
Status: NEW
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: opendmarc
Version: epel9
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Kevin Fenzi
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-21 07:29 UTC by Frank Büttner
Modified: 2025-05-21 07:29 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Frank Büttner 2025-05-21 07:29:09 UTC
Description of problem:
When opendmarc needs sending an an failure report, it fails because of selinux


Version-Release number of selected component (if applicable):
opendmarc-1.4.2-29.el9.x86_64


How reproducible:
Receive an mail where the SPF check fails

Actual results:
The report are not send.


Expected results:
That the report is send.


Additional info:
Journal log:
opendmarc[281744]: 4DD79810FDDB: SPF(mailfrom): <DOMAIN> fail
opendmarc[440956]: sendmail: fatal: open /etc/postfix/main.cf: Permission denied
postfix/sendmail[440956]: fatal: open /etc/postfix/main.cf: Permission denied
opendmarc[281744]: 4DD79810FDDB: pclose() exited with status 75
Audit log:
ausearch -m avc  -p 440956
----
time->Tue May 20 10:00:15 2025
type=PROCTITLE msg=audit(1747728015.416:27163): proctitle=2F7573722F7362696E2F73656E646D61696C002D74002D6F6471
type=SYSCALL msg=audit(1747728015.416:27163): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=555f548ddad0 a2=0 a3=0 items=0 ppid=281744 pid=440956 auid=4294967295 uid=981 gid=980 euid=981 suid=981 fsuid=981 egid=980 sgid=980 fsgid=980 tty=(none) ses=4294967295 comm="sendmail" exe="/usr/sbin/sendmail.postfix" subj=system_u:system_r:dkim_milter_t:s0 key=(null)
type=AVC msg=audit(1747728015.416:27163): avc:  denied  { search } for  pid=440956 comm="sendmail" name="postfix" dev="dm-0" ino=134779488 scontext=system_u:system_r:dkim_milter_t:s0 tcontext=system_u:object_r:postfix_etc_t:s0 tclass=dir permissive=0


Note You need to log in before you can comment on or make changes to this bug.