Daniel J Walsh wrote:
also in Applications > SELinux Management, change the boolean "Allow
http daemon to send mail" to yes.
-----BEGIN PGP SIGNED MESSAGE-----
Donald Reader wrote:
I have narrowed down my SELinux errors to just one while
using php to send mail via it's mail function. For the life
of me I can't get this one figured out as I did an updatedb
so I could try and use locate to find the file that is
being complained about with no luck at all.
If anyone can shed some light on this I would appreciate it
greatly. Attached is the sealert with all the info on the problem.
These avc's show sendmail attempting to read files created by the apache
process (mod_php) in /tmp. sendmail is also trying to read a file off
of /usr/share/GeoIP/GeoIP.dat which is labeled usr_t. The easiest thing
for you to do is to build a local policy module
# grep httpd /var/log/audit/audit.log | audit2allow -M myhttp
# semodule -i myhttp.pp
This would allow the mail program to read these files.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----