[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Daniel J Walsh wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Donald Reader wrote:
I have narrowed down my SELinux errors to just one while
using php to send mail via it's mail function. For the life
of me I can't get this one figured out as I did an updatedb so I could try and use locate to find the file that is
being complained about with no luck at all.

If anyone can shed some light on this I would appreciate it
greatly. Attached is the sealert with all the info on the problem.

Thank You
Donald Reader

These avc's show sendmail attempting to read files created by the apache
 process (mod_php) in /tmp.  sendmail is also trying to read a file off
of /usr/share/GeoIP/GeoIP.dat which is labeled usr_t.  The easiest thing
for you to do is to build a local policy module


# grep httpd /var/log/audit/audit.log | audit2allow -M myhttp
# semodule -i myhttp.pp

This would allow the mail program to read these files.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkfZq3QACgkQrlYvE4MpobMJoACgtUP9awE738qPTceRR1K9fU+H
rM0AoMjM+Xq09iGJfuEjgMRDDnJPSmMs
=bPMH
-----END PGP SIGNATURE-----

also in Applications > SELinux Management, change the boolean "Allow http daemon to send mail" to yes.





[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]
  Powered by Linux