On Wed, 2004-09-15 at 20:53 -0700, Tom London wrote:
> Running strict/enforcing, latest packages from Dan's tree.
>
> Argh... mailman again.
>
> Here's the avc:
>
> Sep 15 20:40:02 fedora kernel: audit(1095306002.105:0): avc: denied {
> getattr } for pid=20117 exe=/usr/bin/python
> path=/var/mailman/pythonlib/korean/__init__.pyc dev=hda2 ino=444330
> scontext=system_u:system_r:mailman_queue_t
> tcontext=system_u:object_r:var_t tclass=file
>
> occurs every 5 minutes (so generates lots of error'ed emails). Mailman
> requires
> python 'stuff' from /var/mailman/pythonlib and from /var/mailman/Mailman.
Eww. Why does mailman put Python libraries there? They should go
in /usr/lib/python2.3/site-packages. I think simply moving them there
would make them lib_t which should fix the problem.
I would file a bug on our mailman package.
Attachment:
signature.asc
Description: This is a digitally signed message part