On Tue, 17 Feb 2009 18:11:55 -0500 "G.Wolfe Woodbury" <ggw@xxxxxxxxxxxxxxxxxxx> wrote: > Paul Howarth wrote: > > G.Wolfe Woodbury wrote: > >> SELinux is constantly complaining that the spamassassin daemon > >> (spamc) doesn't have permissions to do various things to sendmail > >> (read write, getattr, etc...) > >> > >> This is the main reason that I have been ignoring SELinux and > >> running in permissive mode. It's probably about time to complain > >> and ask someone to fix it since I've not got the ability to do so. > > > > Might this be https://bugzilla.redhat.com/show_bug.cgi?id=485426 ? > > If so, have you tried switching to enforcing mode and testing if it > > still actually works despite the denials? > > No, that section of the sendmail seems to behave in terms of file > descriptors, but is being denied by SELinux/kernel in other places. > I just doesn't work at all in enforcing mode. > > > How are you using spamassassin with sendmail - spamass-milter? > > No, the other method of having a spamc process filtering it from the > user's .procmailrc so that each user can opt-in/opt-out of spam > detection on their own. > > > >> I apologize if this is the wrong list. > > > > fedora-selinux-list would probably be a better place. > > I'll have to join another list then. OK, post to fedora-selinux-list and include the selinux denials you're seeing (they'll be in /var/log/messages if you're not running auditd and /var/log/audit/audit.log otherwise). Paul. -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
