Bug 379691 - SELinux prevents /usr/sbin/postmap from being run
Summary: SELinux prevents /usr/sbin/postmap from being run
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 8
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-11-13 10:53 UTC by Nils Philippsen
Modified: 2008-01-30 19:19 UTC (History)
1 user (show)

Fixed In Version: Current
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-01-30 19:19:39 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Nils Philippsen 2007-11-13 10:53:05 UTC
Description of problem:

SSIA

Version-Release number of selected component (if applicable):
selinux-policy-3.0.8-52.fc8
selinux-policy-targeted-3.0.8-52.fc8
postfix-2.4.5-2.fc8

How reproducible:
Always

Steps to Reproduce:

root@wombat:~> setenforce 1
root@wombat:~> postmap
-bash: /usr/sbin/postmap: Permission denied
root@wombat:~> ls -lZ /usr/sbin/postmap
-rwxr-xr-x  root root system_u:object_r:postfix_map_exec_t:s0 /usr/sbin/postmap
root@wombat:~> restorecon -v -F /usr/sbin/postmap
restorecon reset /usr/sbin/postmap context
system_u:object_r:postfix_map_exec_t:s0->system_u:object_r:postfix_map_exec_t:s0
root@wombat:~> postmap
-bash: /usr/sbin/postmap: Permission denied
root@wombat:~> setenforce 0
root@wombat:~> postmap
postmap: fatal: usage: postmap [-Nfinoprsvw] [-c config_dir] [-d key] [-q key]
[map_type:]file...
  
Actual results:
postmap can't be executed in enforcing mode

Expected results:
postmap can be executed in enforcing mode

Additional info:
I don't get any notifications via setroubleshoot about this.

Comment 1 Daniel Walsh 2007-11-13 19:39:02 UTC
Fixed in selinux-policy-3.0.8-54.fc8

Comment 2 Daniel Walsh 2008-01-30 19:19:39 UTC
Bulk closing all bugs in Fedora updates in the modified state.  If you bug is
not fixed, please reopen.


Note You need to log in before you can comment on or make changes to this bug.