Re: squirrelmail gpg plugin and selinux problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Daniel J Walsh wrote:
George Avrunin wrote:
I'm trying to setup the squirrelmail gpg plugin to sign messages on FC6,
fully updated.  (I normally use Claws-Mail, but sometimes need webmail
when traveling.)  With selinux in enforcing mode, I always get a "bad
passphrase" message from the plugin, though it works fine with selinux in
permissive mode (and I can send without signing in enforcing mode). I'm
seeing messages in the audit.log like:

type=AVC msg=audit(1176227136.350:36646): avc: denied { setrlimit } for
pid=3 0752 comm="gpg" scontext=root:system_r:httpd_sys_script_t:s0
tcontext=root:system_r:httpd_sys_script_t:s0 tclass=process
type=SYSCALL msg=audit(1176227136.350:36646): arch=40000003 syscall=75
success=n o exit=-13 a0=4 a1=bff6078c a2=88bff4 a3=800c0cbb items=0
ppid=30750 pid=30752 a uid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48
egid=48 sgid=48 fsgid=48 tty=(none) comm="gpg" exe="/usr/bin/gpg"
subj=root:system_r:httpd_sys_script_t:s0 key=(nul l)

I haven't found anything on this on the web and I assume I'm not the only
person trying to do this, so I must have messed up some configuration.
I've tried changing the values of various http-related booleans without
success, but I don't understand selinux very well.  I'd be grateful for
any suggestions. Thanks,

  George
Nope I have a feeling you are the first to try this, with SELinux.

Could you attempt this in permissive mode to see what avc's are generated.


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux