Fresh FC5 install (not an update) on an Intel 32bit CPU.
Applied all updates, reboot, let anacron do its job, reboot.
Installed Postfix and Cyrus-IMAPd
While testing Postfix with Cyrus I got this:
May 3 09:38:25 stantz kernel: audit(1146674305.211:305): avc: denied
{ search } for pid=3441 comm="lmtp" name="lib" dev=hda2 ino=2293761
scontext=user_u:system_r:postfix_master_t:s0
tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
OK, fine, I go here and follow the steps (all the time working in
the /root/selinux directory):
http://fedora.redhat.com/docs/selinux-faq-fc5/#faq-entry-local.te
However, I can't seem to load the local module:
# /usr/sbin/semodule -i local.pp
/usr/sbin/semodule: Could not read file 'local.pp':
# ls
local.fc local.if local.pp local.te tmp
# cat local.te
policy_module(local, 1.0)
require {
type postfix_master_t;
type var_lib_t;
}
allow postfix_master_t var_lib_t:dir search;
In the logs I get this:
audit(1146674668.001:307): avc: denied { search } for pid=3569
comm="semodule" name="selinux" dev=hda4 ino=6501763
scontext=user_u:system_r:semanage_t:s0
tcontext=user_u:object_r:user_home_t:s0 tclass=dir
What is going on?
--
Florin Andrei
http://florin.myip.org/
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
