Bug 499701 - spamassassin spamd dies because of SElinux when it is HUP(ed)
spamassassin spamd dies because of SElinux when it is HUP(ed)
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: selinux-policy (Show other bugs)
All Linux
low Severity medium
: rc
: ---
Assigned To: Daniel Walsh
Depends On:
  Show dependency treegraph
Reported: 2009-05-07 13:55 EDT by Jillian Dacosta
Modified: 2012-10-15 10:06 EDT (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2009-09-02 04:00:27 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Jillian Dacosta 2009-05-07 13:55:18 EDT
Description of problem:
With Default SElinux policy kill -HUP on spamd process teminates spamd instead of re-HUPing it. With SElinux set to permissive it functions.

Version-Release number of selected component (if applicable):
SpamAssassin Server version 3.2.5

How reproducible:
It repeats every time for a default Red Hat Linux spamassassin installation.

Steps to Reproduce:
1. install spamassassin 
2. start spamd 
3. kill -HUP its PID
4. spamd just dies. It does not reHUP
Actual results:

Expected results:
With SElinux in permissive mode it reHUPs as expected.

Additional info:
Logs shows:
Can't exec "/usr/bin/spamd": Permission denied at /usr/bin/spamd line 2627. 
spamd: restart failed: exec failed: /usr/bin/spamd -d -r /var/run/spamd.pid:
Comment 1 Daniel Walsh 2009-05-07 15:20:00 EDT
Please attach the AVC you are seeing?
Comment 2 Daniel Walsh 2009-05-08 08:00:15 EDT
Fixed in selinux-policy-2.4.6-232.el5
Preview to U4 policy is available on 

You can add these rules for now using

# grep avc /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Comment 9 errata-xmlrpc 2009-09-02 04:00:27 EDT
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.


Note You need to log in before you can comment on or make changes to this bug.