Andy Green wrote:
> Sep 27 14:08:56 siamese postfix/smtpd[13486]: warning: connect to
> /var/spool/postfix/postgrey/socket: Permission denied
...
> However there are no avc complaints in /var/log/messages. Turning off
I discover /var/log/audit/audit.log ... much neater once you know about
it :-) This is the AVC message:
type=AVC msg=audit(1127827818.253:472): avc: denied { connectto } for
pid=13783 comm="smtpd" name="socket"
scontext=root:system_r:postfix_smtpd_t tcontext=root:system_r:initrc_t
tclass=unix_stream_socket
type=SYSCALL msg=audit(1127827818.253:472): arch=c000003e syscall=42
success=yes exit=0 a0=14 a1=7fffffa59ec0 a2=6e a3=7fffffa59ec2 items=1
pid=13783 auid=500 uid=89 gid=89 euid=89 suid=89 fsuid=89 egid=89
sgid=89 fsgid=89 comm="smtpd" exe="/usr/libexec/postfix/smtpd"
type=AVC_PATH msg=audit(1127827818.253:472):
path="/var/spool/postfix/postgrey/socket"
type=SOCKADDR msg=audit(1127827818.253:472):
saddr=01002F7661722F73706F6F6C2F706F73746669782F706F7374677265792F736F636B65740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
type=PATH msg=audit(1127827818.253:472): item=0 flags=1 inode=3342296
dev=fd:00 mode=0140666 ouid=95 ogid=99 rdev=00:00
-Andy
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
