Re: Selinux issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Am So, den 25.09.2005 schrieb Craig White um 1:13:

> > >>type=AVC msg=audit(1127594745.645:394): avc:  denied  { name_bind } for 
> > >>  pid=4155 comm="master" src=10025 
> > >>scontext=root:system_r:postfix_master_t 
> > >>tcontext=system_u:object_r:amavisd_send_port_t tclass=tcp_socket

> My version of Postfix (admittedly CentOS 4) doesn't have those files
> which means that there is no context to restore because they weren't
> part of the default definitions. Is this fedora version of Postfix? Did
> you create those files? If so, you would have to set the contexts
> yourself...
> 
> This is what I use as my bible for SELinux...
> 
> http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-
> guide/
> 
> Craig

I think the problem comes from the non standard port 10025, which could
be too any other for the mail transport between amavisd-new and Postfix.
And I guess a custom SELinux rule is needed for that - audit2allow can
help.

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.11-1.35_FC2smp 
Serendipity 02:34:55 up 4 days, 10:20, load average: 0.14, 0.16, 0.19 

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux