Re: SELinux newbie

[Stephen Smalley <sds tycho nsa gov>]

On Tue, 2008-01-15 at 15:16 +0100, Sietjp wrote:
> Thx Eric,
> 
> I tried and it still cause permission denied.
> 
> Actually this morning I've done :
> 
> chcon -t httpd_sys_content_t /usr/sbin/sendmail.sendmail
> 
> Could it be the reason why it still doesn't work ?

Yes, run 'restorecon -v /usr/sbin/sendmail.sendmail'.

> 
> Thanks
> JP
> 
> > setsebool -P httpd_can_sendmail 1
> >
> > if you have more httpd questions see
> > man (8) httpd_selinux
> >
> > (oh yeah, dwalsh, httpd_can_sendmail isn't in that man page wanna add
> > it?)
> >
> > -Eric
> >
> >
> > On Tue, 2008-01-15 at 14:34 +0100, Sietjp wrote:
> > >
> > > Hi all,
> > > Sorry for this newbie post.
> > > I'm running fedora 8 and lamp.
> > > All is wroking fine except of emails. Apache is not able to send emails via
> > > sendmail.
> > >
> > > I tried setenforce 0, and then all is working fine.
> > >
> > > But as I'm not a lazy guy, I would like to keep SELInux active and
> > understand
> > > what is giong wrong.
> > >
> > > Please help :)
> > > I don't ask for the solution but maybe a starting point or a link, thx :)
> > >
> > > JP
> > >
> > > --
> > > fedora-selinux-list mailing list
> > > fedora-selinux-list redhat com
> > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >
> >
> 
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list redhat com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
-- 
Stephen Smalley
National Security Agency