Re: Sudden exim selinux problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2007-10-04 at 11:40 +0100, Matt Bernstein wrote:
> At 11:23 +0100 John Horne wrote:
> 
> > I'm running F7 on my work PC, and use the Exim MTA to receive mail on
> > the PC from our central mailhubs. This has not been a problem since I
> > first installed F7, and I have been running it with selinux enabled.
> 
> I think exim has just got some selinux policy. You might need to "fixfiles 
> relabel" on your workstation.
> 
Running 'fixfiles' didn't resolve it.

> > Anyone else noticed this, or any ideas about it? I'm currently looking
> > for that F7 utility that explains the audit.log entries a bit better and
> > how to (possibly) correct the problem. Trouble is I can't remember what
> > it is called! :-)
> 
> setroubleshoot
> audit2why
> audit2allow (but try to get your files into the right context first, 
> perhaps under "setenforce 0")
> 
'audit2why' was what I was thinking of.

'getsebool' shows only 2 Exim booleans, both off by default. Turning
these to 'on' made no difference. Running audit2allow, and following the
man page, changed things but the mail still fails. I now get (for
example):

==================================================
2007-10-04 12:40:07 H=tracy.csd.plymouth.ac.uk [141.163.177.2]
F=<condor-users-bounces@xxxxxxxxxxx> temporarily rejected RCPT
<john@xxxxxxxxxxxxxxxxxxxxxxxxx>: require_files: error
for /home/john/Maildir/: Permission denied
==================================================

Now this isn't an selinux error, but, as said before, this was all
working fine. The directory Maildir certainly hasn't changed. I think
I'm basically going to have to disable selinux (because the mail works
then) and send the problem up to bugzilla so that it can be fixed in the
next update.

Thanks for your help,


John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: John.Horne@xxxxxxxxxxxxxx       Fax: +44 (0)1752 233839

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux