I have narrowed down my SELinux errors to just one while
using php to send mail via it's mail function. For the life
of me I can't get this one figured out as I did an updatedb
so I could try and use locate to find the file that is
being complained about with no luck at all.
If anyone can shed some light on this I would appreciate it
greatly. Attached is the sealert with all the info on the problem.
Thank You
Donald Reader
Summary:
SELinux is preventing the sendmail from using potentially mislabeled files
(2F746D702F2E4E5350522D41464D2D31353135322D62383731303536382E30202864656C6574656429).
Detailed Description:
SELinux has denied sendmail access to potentially mislabeled file(s)
(2F746D702F2E4E5350522D41464D2D31353135322D62383731303536382E30202864656C6574656429).
This means that SELinux will not allow sendmail to use these files. It is common
for users to edit files in their home directory or tmp directories and then move
(mv) them to system directories. The problem is that the files end up with the
wrong file context which confined applications are not allowed to access.
Allowing Access:
If you want sendmail to access this files, you need to relabel them using
restorecon -v
'2F746D702F2E4E5350522D41464D2D31353135322D62383731303536382E30202864656C6574656429'.
You might want to relabel the entire directory using restorecon -R -v ''.
Additional Information:
Source Context system_u:system_r:system_mail_t:s0
Target Context system_u:object_r:httpd_tmp_t:s0
Target Objects 2F746D702F2E4E5350522D41464D2D31353135322D62383731
303536382E30202864656C6574656429 [ file ]
Source sendmail
Source Path /usr/sbin/sendmail.sendmail
Port <Unknown>
Host dads.localdomain
Source RPM Packages sendmail-8.14.2-1.fc8
Target RPM Packages
Policy RPM selinux-policy-3.0.8-87.fc8
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name home_tmp_bad_labels
Host Name dads.localdomain
Platform Linux dads.localdomain 2.6.24.3-12.fc8 #1 SMP Tue
Feb 26 14:58:29 EST 2008 i686 i686
Alert Count 2
First Seen Wed 12 Mar 2008 08:36:46 AM PDT
Last Seen Wed 12 Mar 2008 08:49:35 AM PDT
Local ID ae241a7f-d927-4403-a678-59664db37886
Line Numbers
Raw Audit Messages
host=dads.localdomain type=AVC msg=audit(1205336975.827:1839): avc: denied { read write } for pid=29080 comm="sendmail" path=2F746D702F2E4E5350522D41464D2D31353135322D62383731303536382E30202864656C6574656429 dev=sda8 ino=48968 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:httpd_tmp_t:s0 tclass=file
host=dads.localdomain type=AVC msg=audit(1205336975.827:1839): avc: denied { read } for pid=29080 comm="sendmail" path="/usr/share/GeoIP/GeoIP.dat" dev=sdb1 ino=6325960 scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file
host=dads.localdomain type=SYSCALL msg=audit(1205336975.827:1839): arch=40000003 syscall=11 success=yes exit=0 a0=8a0a2d0 a1=8a0a440 a2=8a09750 a3=40 items=2 ppid=15193 pid=29080 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:system_mail_t:s0 key=(null)
host=dads.localdomain type=CWD msg=audit(1205336975.827:1839): cwd="/var/www/vhosts/Projects/Php4/Links/httpdocs"
host=dads.localdomain type=PATH msg=audit(1205336975.827:1839): item=0 name="/usr/sbin/sendmail" inode=6182037 dev=08:11 mode=0102755 ouid=0 ogid=51 rdev=00:00 obj=system_u:object_r:sendmail_exec_t:s0
host=dads.localdomain type=PATH msg=audit(1205336975.827:1839): item=1 name=(null) inode=4228847 dev=08:11 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0
