On Tue, Mar 30, 2004 at 07:55:24PM +1100, Russell Coker wrote:
> What is this "master" file? Please run "find / -inum 1407396" and tell me
> what it reports.
"master" is one of the subprograms that make up postfix. They all reside
in /usr/libexec/postfix and at the moment have a system_u:object_r:lib_t
context.
With your fix, I still get the name=master message, plus these two:
Mar 30 05:56:15 pizza kernel: audit(1080647775.335:0): avc: denied {
getattr } for pid=2310 exe=/usr/sbin/postalias path=/dev/pts/2 dev=
ino=4 scontext=root:system_r:postfix_master_t
tcontext=root:object_r:sysadm_devpts_t tclass=chr_file
Mar 30 05:56:15 pizza kernel: audit(1080647775.381:0): avc: denied {
execute_no_trans } for pid=2312 exe=/bin/bash
path=/usr/libexec/postfix/master dev=sda3 ino=1407394
scontext=root:system_r:postfix_master_t tcontext=system_u:object_r:lib_t
tclass=file
Thank you very much for your help,
Rudi
