Re: Question on Fedora's RPM of Mailmail and Sendmail

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Todd Zullinger wrote:


Do you have SELinux in enforcing mode?

I have it completely disabled since the installation. (and I doubled checked the sysconfig/selinux file for this email. ;) )


Hmmm, on an F8 box with a fresh install of mailman and everything else
up to date (including the updates-testing repository), I don't see
this particular error.  I do get a failed delivery with SELinux in
enforcing mode though.  The bounce in my case is:

I'm using FC-7 not 8... so I don't know what diff's might exist there... but..
moving along.


Setting SELinux to permissive lets the mail go through.  So there
appear to be some policy tweaks needed.


Hmmm, and in my case where it's disabled?


It's likely that testing with SELinux in enforcing mode hasn't been
tested well.  Since mailman can be used with a variety of MTA's and
involves a bit of work after installing the rpm to finish the setup, I
can undertstand this.  I hadn't tested mailman with sendmail in many
years until today.  I typically use Postfix since it integrates with
mailman much nicer IMO.

I would offer the argument that this is a matter of what user/group sendmail is running as vs. what user/group mailman was built to run with.

As for Postfix, I'm a sendmail fan and use it with all the other goodies
one might use with sendmail to control spam (mimedefang, spamassassin) so
moving from sendmail won't happen in the near future just as I'm comfy with
it and have my plate filled with other things (that are part of my j-o-b).

Anyway...


See if running "setenforce 0" as root changes the behavior.  If it
does, then we should gather up the AVC messages from SELinux and
report them to bugzilla so Dan Walsh can push out a corrected SELinux
policy that allows mailman to operate with sendmail.

again, my SElinux is disabled, so what might you recommend?

Thanks for the fast reply!


  -Ben


--
Ben Kamen - O.D.T., S.P.
======================================================================
Email: bkamen AT benjammin DOT net       Web: http://www.benjammin.net
begin:vcard
fn:Ben Kamen
n:Kamen;Ben
adr:;;;;;;USA
email;internet:bkamen@xxxxxxxxxxxxx
title:O.D.T. - S.P.
x-mozilla-html:FALSE
url:http://www.benjammin.net/
version:2.1
end:vcard

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux