On 07/14/2010 11:37 PM, Frank Chiulli wrote: > I recently did a fresh install of F13 on my system. My home directory > which is on a separate disk was not touched. Now whenever exim > retrieves a message I get two SELinux alerts. > > > > Summary: > > SELinux is preventing /usr/sbin/exim "getattr" access on > /home/frank/.procmailrc. > > Detailed Description: > > SELinux denied access requested by exim. It is not expected that this access is > required by exim and this access may signal an intrusion attempt. It is also > possible that the specific version or configuration of the application is > causing it to require additional access. > > Allowing Access: > > You can generate a local policy module to allow this access - see FAQ > (http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug > report. > > Additional Information: > > Source Context system_u:system_r:exim_t:s0 > Target Context unconfined_u:object_r:procmail_home_t:s0 > Target Objects /home/frank/.procmailrc [ file ] > Source exim > Source Path /usr/sbin/exim > Port <Unknown> > Host flinux > Source RPM Packages exim-4.72-1.fc13 > Target RPM Packages > Policy RPM selinux-policy-3.7.19-33.fc13 > Selinux Enabled True > Policy Type targeted > Enforcing Mode Enforcing > Plugin Name catchall > Host Name flinux > Platform Linux flinux 2.6.33.6-147.fc13.i686.PAE #1 SMP Tue > Jul 6 22:24:44 UTC 2010 i686 i686 > Alert Count 6 > First Seen Sun 11 Jul 2010 08:14:38 AM PDT > Last Seen Sun 11 Jul 2010 08:14:39 AM PDT > Local ID d8803924-02a3-446e-b20d-15ae78163c71 > Line Numbers > > Raw Audit Messages > > node=flinux type=AVC msg=audit(1278861279.461:42): avc: denied { > getattr } for pid=2279 comm="exim" path="/home/frank/.procmailrc" > dev=sdb1 ino=4480740 scontext=system_u:system_r:exim_t:s0 > tcontext=unconfined_u:object_r:procmail_home_t:s0 tclass=file > > node=flinux type=SYSCALL msg=audit(1278861279.461:42): arch=40000003 > syscall=196 success=no exit=-13 a0=2164020 a1=bf91420c a2=6fcff4 > a3=216cd55 items=0 ppid=2278 pid=2279 auid=4294967295 uid=500 gid=500 > euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) > ses=4294967295 comm="exim" exe="/usr/sbin/exim" > subj=system_u:system_r:exim_t:s0 key=(null) Open a bugzilla. -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
