mailman...

[Colin Walters]

On Wed, 2004-09-15 at 20:53 -0700, Tom London wrote:
> Running strict/enforcing, latest packages from Dan's tree.
> 
> Argh... mailman again.
> 
> Here's the avc:
> 
> Sep 15 20:40:02 fedora kernel: audit(1095306002.105:0): avc:  denied  { 
> getattr } for  pid=20117 exe=/usr/bin/python 
> path=/var/mailman/pythonlib/korean/__init__.pyc dev=hda2 ino=444330 
> scontext=system_u:system_r:mailman_queue_t 
> tcontext=system_u:object_r:var_t tclass=file
> 
> occurs every 5 minutes (so generates lots of error'ed emails).  Mailman 
> requires
> python 'stuff' from /var/mailman/pythonlib and from /var/mailman/Mailman.

Eww.  Why does mailman put Python libraries there?  They should go
in /usr/lib/python2.3/site-packages.  I think simply moving them there
would make them lib_t which should fix the problem.

I would file a bug on our mailman package.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20040916/2abe612e/attachment.sig>