squirrelmail / postfix mail lost policy 1.17.30-2.80

[Daniel J Walsh]

Jeremy Ardley wrote:

> Hi,
>
> On fedora core 3 - out of the box plus some upgrades. My current setup 
> has
>
> policycoreutils-1.18.1-2.9
> selinux-policy-targeted-1.17.30-2.80
> squirrelmail-1.4.3a-6.FC3
> dovecot-0.99.11-1.FC3.4
>
> I can send mail normally from my system except when I use 
> squirrelmail. The mail is quietly dropped without being sent and a 
> copy is moved into my sent items folder.
>
> When I check the messages log I see the following avc entries
>
> Feb 24 17:14:46 mail kernel: audit(1109236486.039:0): avc:  denied  { 
> read append } for  pid=7589 exe=/bin/bash 
> path=/var/lib/squirrelmail/prefs/jeremy.abook dev=dm-0 ino=6438914 
> scontext=user_u:system_r:httpd_sys_script_t t 
> context=root:object_r:httpd_var_lib_t tclass=file
> Feb 24 17:14:46 mail kernel: audit(1109236486.128:0): avc:  denied  { 
> create } for  pid=7589 exe=/usr/sbin/sendmail.postfix 
> scontext=user_u:system_r:httpd_sys_script_t 
> tcontext=user_u:system_r:httpd_sys_script_t tclass=unix_ dgram_socket
> Feb 24 17:14:46 mail kernel: audit(1109236486.136:0): avc:  denied  { 
> search } for  pid=7589 exe=/usr/sbin/sendmail.postfix name=spool 
> dev=dm-0 ino=4030501 scontext=user_u:system_r:httpd_sys_script_t 
> tcontext=system_u:object _r:var_spool_t tclass=dir
> Feb 24 17:14:46 mail kernel: audit(1109236486.137:0): avc:  denied  { 
> create } for  pid=7589 exe=/usr/sbin/sendmail.postfix 
> scontext=user_u:system_r:httpd_sys_script_t 
> tcontext=user_u:system_r:httpd_sys_script_t tclass=unix_ dgram_socket
>
> I have seen previous correspondence regarding similar faults but 
> nothing I have tried has improved things. Is there a definitive fix I 
> can apply?

restorecon -R -v /usr/lib/squirrelmail /usr/sbin/sendmail.postfix /var/spool

Should help.

>
> Thanks
>
> Jeremy
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list