Fedora Account System
Red Hat Associate
Red Hat Customer
Maybe this is the same as RHEL bug 730218, now fixed. procmail sometimes need to execute commands or scripts to further process mail. My scripts are in /opt. In RHEL bug 730218, someone required access to the hostname command. My log: Apr 4 08:19:29 ulmo setroubleshoot: SELinux is preventing /usr/bin/procmail from execute access on the file /opt/crm114_workingdir/mailfilter.crm I think adding "application_exec_all(procmail_t)", as was done in RHEL, would fix this for me. - Mike
type=AVC msg=audit(1333542605.552:2545086): avc: denied { execute } for pid=14638 comm="procmail" name="mailfilter.crm" dev=dm-1 ino=395078 scontext=system_u:system_r:procmail_t:s0 tcontext=unconfined_u:object_r:usr_t:s0 tclass=file type=SYSCALL msg=audit(1333542605.552:2545086): arch=c000003e syscall=59 success=no exit=-13 a0=1626480 a1=1625010 a2=16284f0 a3=8 items=0 ppid=14636 pid=14638 auid=4294967295 uid=1002 gid=1002 euid=1002 suid=1002 fsuid=1002 egid=1002 sgid=1002 fsgid=1002 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
chcon -t bin_t /opt/crm114_workingdir/mailfilter.crm Would fix the problem.
Yes, that would. Thanks!