[Bug 187974] selinux denials of spamd reading files in /var/lib/spamassassin/

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: selinux denials of spamd reading files in /var/lib/spamassassin/


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187974





------- Additional Comments From nicolas.mailhot at laposte.net  2006-12-15 03:49 EST -------
(In reply to comment #6)

> As far as /var/lib:
> Is this something the fedora package changes or is this something new?

It's somehow a new upstream feature where updated rules can be distributed
separately from the main engine, so the sa people do not have to do full
releases every time a spammer thinks of a new trick (similar to new AV checksums)

> Does
> spamd need to read files in /var/lib?  Does it need to write them there?

sa needs read access to /var/lib/spamassassin, the rules updating is supposed to
be done by a super-user (allowing sa to self-update its ruleset would of course
be dangerous)
 
IMHO /var/lib and not /var/cache or /var/spool is the right place for this kind
of stuff

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.