Maybe this is the same as RHEL bug 730218, now fixed. procmail sometimes need to execute commands or scripts to further process mail. My scripts are in /opt. In RHEL bug 730218, someone required access to the hostname command. My log: Apr 4 08:19:29 ulmo setroubleshoot: SELinux is preventing /usr/bin/procmail from execute access on the file /opt/crm114_workingdir/mailfilter.crm I think adding "application_exec_all(procmail_t)", as was done in RHEL, would fix this for me. - Mike
type=AVC msg=audit(1333542605.552:2545086): avc: denied { execute } for pid=14638 comm="procmail" name="mailfilter.crm" dev=dm-1 ino=395078 scontext=system_u:system_r:procmail_t:s0 tcontext=unconfined_u:object_r:usr_t:s0 tclass=file type=SYSCALL msg=audit(1333542605.552:2545086): arch=c000003e syscall=59 success=no exit=-13 a0=1626480 a1=1625010 a2=16284f0 a3=8 items=0 ppid=14636 pid=14638 auid=4294967295 uid=1002 gid=1002 euid=1002 suid=1002 fsuid=1002 egid=1002 sgid=1002 fsgid=1002 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
chcon -t bin_t /opt/crm114_workingdir/mailfilter.crm Would fix the problem.
Yes, that would. Thanks!