Bug 553277 - regression in selinux-policy-2.4.6-255.el5_4.3 breaks postfix /usr/sbin/sendmail interface
Summary: regression in selinux-policy-2.4.6-255.el5_4.3 breaks postfix /usr/sbin/sendm...
Keywords:
Status: CLOSED DUPLICATE of bug 553492
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: selinux-policy
Version: 5.4.z
Hardware: All
OS: Linux
low
high
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-01-07 15:07 UTC by Tuomo Soini
Modified: 2010-01-09 13:50 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-01-09 13:50:44 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Tuomo Soini 2010-01-07 15:07:28 UTC
Description of problem:

selinux-policy-2.4.6-255.el5_4.3 breaks postfix /usr/sbin/sendmail interface

Version-Release number of selected component (if applicable):

2.4.6-255.el5_4.3

How reproducible:

Always

Steps to Reproduce:
1. update selinux-policy to 2.4.6-255.el5_4.3
2. try to send mail via /usr/sbin/sendmail (postfix)
3. Mail send doesn't work.
  
Additional info:

Reverting this change fixes problem:

--- serefpolicy-2.4.6.old/policy/modules/services/postfix.te    2010-01-07 16:16:14.000000000 +0200
+++ serefpolicy-2.4.6.new/policy/modules/services/postfix.te    2010-01-07 16:16:59.000000000 +0200
@@ -548,7 +548,7 @@
 ')
 
 optional_policy(`
-       sendmail_rw_unix_stream_sockets(postfix_postdrop_t)
+    sendmail_dontaudit_rw_unix_stream_sockets(postfix_postdrop_t)
 ')
 
 optional_policy(`

Comment 1 Daniel Walsh 2010-01-07 15:25:36 UTC
I don't have a problem with that.  Not sure why the change was made.

Comment 2 Section1 2010-01-09 00:01:44 UTC
I have same problem:

selinux-policy-2.4.6-255.el5_4.3
postfix-2.3.3-2.1.el5_2
mailx-8.1.1-44.2.2

If i disable SELinux works fine ...but if its enable i get:

# mail root
Subject: test
test
.
Cc: 
send-mail: warning: premature end-of-input on /usr/sbin/postdrop -r while reading input attribute name
send-mail: fatal: root(0): unable to execute /usr/sbin/postdrop -r: Success

and in audit.log i dont see any entry about this

Postfix work good with SELinux enabled i can receive and send mails with mail clients

Comment 3 GV 2010-01-09 11:03:18 UTC
I also have the same problem:

postfix/sendmail[20232]: warning: premature end-of-input on /usr/sbin/postdrop -r while reading input attribute name
postfix/sendmail[20232]: fatal: gabriel(532): unable to execute /usr/sbin/postdrop -r: Success

I lost all mail forwarded with procmail.

Gabriel

Comment 4 Daniel Walsh 2010-01-09 13:50:44 UTC
I have posted a fix for this in the duplicate.

*** This bug has been marked as a duplicate of bug 553492 ***


Note You need to log in before you can comment on or make changes to this bug.