Re: Defaults of CentOS Install not working with SELinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Thanks - this is helpful but still not quite a fix.   The suggested  
fixes seem general for the three issues of dovecot, nmbd, and spamc -  
but audit2allow does at least create them.

[dan@trailrunner ~]$ cat dovecotsocketselinux.te

module dovecotsocketselinux 1.0;

require {
	type dovecot_t;
	class socket create;
}

#============= dovecot_t ==============
allow dovecot_t self:socket create;
[dan@trailrunner ~]$
[dan@trailrunner ~]$
[dan@trailrunner ~]$ cat nmbdselinux.te

module nmbdselinux 1.0;

require {
	type samba_share_t;
	type nmbd_t;
	class file { rename getattr unlink append };
	class dir { search setattr };
}

#============= nmbd_t ==============
allow nmbd_t samba_share_t:dir { search setattr };
allow nmbd_t samba_share_t:file { rename getattr unlink append };
[dan@trailrunner ~]$
[dan@trailrunner ~]$
[dan@trailrunner ~]$ cat spamcselinux.te

module spamcselinux 1.0;

require {
	type spamc_exec_t;
	type procmail_t;
	class file { read execute execute_no_trans };
}

#============= procmail_t ==============
allow procmail_t spamc_exec_t:file { read execute execute_no_trans };
[dan@trailrunner ~]$

The problem is that when these are installed, dovecot fails - port 993  
already in use.

So now what - again, default CentOS options and configuration for all  
three of these.

On Apr 30, 2009, at 1:38 PM, Ned Slider wrote:

> Dan Roberts wrote:
>> Ok, but how?
>>
>
> http://wiki.centos.org/HowTos/SELinux
>
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux