[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

postfix AVCs



Hello All,

Using targeted policies 1.27.1-2.18 with postfix-2.2.2-2 on FC4.

I receive lots of AVCs related to postfix (here is one regarding postdrop, but 
I have also 'sendmail.postfix', 'cleanup' and 'spamc' related AVCs) :

type=AVC msg=audit(1139803214.270:14817): avc:  denied  { getattr } for  
pid=14521 comm="postdrop" name="pickup" dev=hda2 ino=6193158 
scontext=root:system_r:postfix_pipe_t 
tcontext=system_u:object_r:postfix_public_t tclass=fifo_file
type=SYSCALL msg=audit(1139803214.270:14817): arch=c000003e syscall=4 
success=yes exit=0 a0=62cf28 a1=7fffffb60270 a2=7fffffb60270 a3=2aaaaaaab000 
items=1 pid=14521 auid=500 uid=99 gid=99 euid=99 suid=99 fsuid=99 egid=90 
sgid=90 fsgid=90 comm="postdrop" exe="/usr/sbin/postdrop"
type=AVC_PATH msg=audit(1139803214.270:14817):  
path="/var/spool/postfix/public/pickup"
type=CWD msg=audit(1139803214.270:14817):  cwd="/var/spool/postfix"
type=PATH msg=audit(1139803214.270:14817): item=0 name="public/pickup" flags=1  
inode=6193158 dev=03:02 mode=010622 ouid=89 ogid=89 rdev=00:00
type=AVC msg=audit(1139803214.270:14818): avc:  denied  { write } for  
pid=14521 comm="postdrop" name="pickup" dev=hda2 ino=6193158 
scontext=root:system_r:postfix_pipe_t 
tcontext=system_u:object_r:postfix_public_t tclass=fifo_file
type=SYSCALL msg=audit(1139803214.270:14818): arch=c000003e syscall=2 
success=yes exit=4 a0=62cf28 a1=801 a2=0 a3=2aaaaaaab000 items=1 pid=14521 
auid=500 uid=99 gid=99 euid=99 suid=99 fsuid=99 egid=90 sgid=90 fsgid=90 
comm="postdrop" exe="/usr/sbin/postdrop"
type=CWD msg=audit(1139803214.270:14818):  cwd="/var/spool/postfix"
type=PATH msg=audit(1139803214.270:14818): item=0 name="public/pickup" 
flags=101  inode=6193158 dev=03:02 mode=010622 ouid=89 ogid=89 rdev=00:00


Any explanation ?

If a known bug, could someone post a working postfix.fc/postfix.te set ?

TIA

======================
PS:sorry for the double posting. the first was erroneously 'in-reply-to' 
another message. it would be a pity that someone miss my interesting message 
because of threads filtering ;-)

 


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]