Description of problem: selinux prevents ssmtp from sending email. host=xxx type=AVC msg=audit(1216435357.179:141): avc: denied { name_connect } for pid=15667 comm="sendmail" dest=25 scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023 tcontext=system_u:object_r:smtp_port_t:s0 tclass=tcp_socket host=xxx type=SYSCALL msg=audit(1216435357.179:141): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb44ee0 a2=9dccad8 a3=3 items=0 ppid=15563 pid=15667 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sendmail" exe="/usr/sbin/ssmtp" subj=system_u:system_r:logwatch_t:s0-s0:c0.c1023 key=(null) Version-Release number of selected component (if applicable): selinux-policy-targeted-3.3.1-74.fc9.noarch (and ssmtp-2.61-11.5.fc9.3.i386) How reproducible: Always. Steps to Reproduce: 1. Use ssmtp as mta and let cron.daily run logwatch. Is this related to bug 448608 ?
If you chcon -t sendmail_exec_t /usr/sbin/ssmtp Does it work?
Yes it does. Thanks.
Fixed in selinux-policy-3.3.1-80.fc9.noarch
Feel free to close this. Does work with selinux-policy-3.3.1-82.fc9.noarch