I have tried in vain to resolve the spamass-milter issue and selinux. Nothing
I have tried manually, worked to resolve this issue. The specific issues
that I had was that selinux was expecting spamass-milter to be of type
initrc_t.
I have simply turned off spamass-milter in my sendmail.mc file until I can get
this issue resolved.
Here are some examples of complaints:
/var/log/maillog:
========================
Jan 26 13:56:47 gold sendmail[2408]: m0QLuhZk002408: from=dant, size=53,
class=0, nrcpts=1, msgid=<200801262156.m0QLuhZk002408@xxxxxxxxxxxxxx>,
relay=dant@localhost
Jan 26 13:56:47 gold sendmail[2410]: m0QLulQ9002410: Milter (spamassassin):
error connecting to filter: Permission denied
Jan 26 13:56:47 gold sendmail[2410]: m0QLulQ9002410: Milter (spamassassin): to
error state
Jan 26 13:56:47 gold sendmail[2410]: STARTTLS=server,
relay=localhost.localdomain [127.0.0.1], version=TLSv1/SSLv3, verify=NO,
cipher=DHE-RSA-AES256-SHA, bits=256/256
Jan 26 13:56:47 gold sendmail[2408]: STARTTLS=client, relay=[127.0.0.1],
version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
Jan 26 13:56:50 gold sendmail[2410]: m0QLulQA002410:
from=<dant@xxxxxxxxxxxxxx>, size=332, class=0, nrcpts=1,
msgid=<200801262156.m0QLuhZk002408@xxxxxxxxxxxxxx>, proto=ESMTP, daemon=MTA,
relay=localhost.localdomain [127.0.0.1]
Jan 26 13:56:50 gold sendmail[2410]: m0QLulQA002410: Milter add: header:
X-Virus-Scanned: ClamAV 0.92/5562/Sat Jan 26 03:34:23 2008 on gold.cdkkt.com
Jan 26 13:56:50 gold sendmail[2410]: m0QLulQA002410: Milter add: header:
X-Virus-Status: Clean
Jan 26 13:56:50 gold sendmail[2408]: m0QLuhZk002408: to=dbthurman@xxxxxxxxxxx,
ctladdr=dant (500/500), delay=00:00:07, xdelay=00:00:03, mailer=relay,
pri=30053, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
(m0QLulQA002410 Message accepted for delivery)
Jan 26 13:57:12 gold sendmail[2414]: m0QLulQA002410:
to=<dbthurman@xxxxxxxxxxx>, ctladdr=<dant@xxxxxxxxxxxxxx> (500/500),
delay=00:00:23, xdelay=00:00:22, mailer=esmtp, pri=120332,
relay=mx3.hotmail.com. [65.54.244.200], dsn=2.0.0, stat=Sent (
<200801262156.m0QLuhZk002408@xxxxxxxxxxxxxx> Queued mail for delivery)
========================
/var/log/messages:
========================
Jan 26 13:56:53 gold setroubleshoot: #012 SELinux is
preventing /usr/sbin/sendmail.sendmail (sendmail_t) "connectto"
to /var/run/spamass-milter/spamass-milter.sock (initrc_t).#012 For
complete SELinux messages. run sealert -l
a82ae4e6-5276-4fe6-9db0-44af64ea413d
========================
sealert -l a82ae4e6-5276-4fe6-9db0-44af64ea413d
========================
Summary
SELinux is preventing /usr/sbin/sendmail.sendmail (sendmail_t) "connectto"
to /var/run/spamass-milter/spamass-milter.sock (initrc_t).
Detailed Description
SELinux denied access requested by /usr/sbin/sendmail.sendmail. It is not
expected that this access is required by /usr/sbin/sendmail.sendmail and
this access may signal an intrusion attempt. It is also possible that the
specific version or configuration of the application is causing it to
require additional access.
Allowing Access
You can generate a local policy module to allow this access - see
http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can
disable
SELinux protection altogether. Disabling SELinux protection is not
recommended. Please file a
http://bugzilla.redhat.com/bugzilla/enter_bug.cgi
against this package.
Additional Information
Source Context system_u:system_r:sendmail_t:s0
Target Context system_u:system_r:initrc_t:s0
Target Objects /var/run/spamass-milter/spamass-milter.sock [
unix_stream_socket ]
Affected RPM Packages sendmail-8.14.2-1.fc8 [application]
Policy RPM selinux-policy-3.0.8-76.fc8
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.catchall
Host Name gold.cdkkt.com
Platform Linux gold.cdkkt.com 2.6.23.14-107.fc8 #1 SMP
Mon
Jan 14 21:37:30 EST 2008 i686 i686
Alert Count 1
First Seen Sat Jan 26 13:56:47 2008
Last Seen Sat Jan 26 13:56:47 2008
Local ID a82ae4e6-5276-4fe6-9db0-44af64ea413d
Line Numbers
Raw Audit Messages
avc: denied { connectto } for comm=sendmail egid=51 euid=0
exe=/usr/sbin/sendmail.sendmail exit=-13 fsgid=51 fsuid=0 gid=0 items=0
path=/var/run/spamass-milter/spamass-milter.sock pid=2410
scontext=system_u:system_r:sendmail_t:s0 sgid=51
subj=system_u:system_r:sendmail_t:s0 suid=0 tclass=unix_stream_socket
tcontext=system_u:system_r:initrc_t:s0 tty=(none) uid=0
========================
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
