Yee-HAH! 'smartd' issues 70 avc's when it tries to send mail...

[Valdis.Kletnieks at vt.edu]

On Tue, 07 Dec 2004 11:50:27 EST, Valdis.Kletnieks at vt.edu said:

> I'm wondering if it would make more sense to push a patch upstream to the
> kernel-utils crew.  Reading the smartd manpage in more detail, it looks like
> feeding it a '-M exec /usr/sbin/sendmail' (or building with that as the
> default) would let us only have to add sendmail_exec_t rather than all those.

Or that *would* work, if the smartd code didn't use popen() to actually run it,
giving us a gratuitous '/bin/sh -c'.  Looks like some fairly hefty reworking to
make it do the whole pipe()/fork()/exec() thing itself.

Blech. ;)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20041207/66447458/attachment.sig>