I'm running a Fedora 21 64-bit system, sendmail and spamassassin.
Upgraded a little over a week ago from Fedora 20.
Don't recall seeing these alerts with Fedora 20.... Only been using
SELinux in enforcing mode for a couple months now (apologies in advance
if I'm not providing the relevant details - please let me know what else
to include). I searched for similar issues but couldn't find anything
more recent than 2009.
SELinux Alert:
The source process: /usr/bin/spamc
Attempted this access: write
On this fifo_file: fifo_file
SETroubleshoot Details Window reports:
SELinux is preventing /usr/bin/spamc from write access on the fifo_file
fifo_file.
***** Plugin leaks (86.2 confidence) suggests *****************************
If you want to ignore spamc trying to write access the fifo_file
fifo_file, because you believe it should not need this access.
Then you should report this as a bug.
You can generate a local policy module to dontaudit this access.
Do
# grep /usr/bin/spamc /var/log/audit/audit.log | audit2allow -D -M mypol
# semodule -i mypol.pp
***** Plugin catchall (14.7 confidence) suggests **************************
If you believe that spamc should be allowed write access on the
fifo_file fifo_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep spamc /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Additional Information:
Source Context system_u:system_r:spamc_t:s0
Target Context system_u:system_r:sendmail_t:s0
Target Objects fifo_file [ fifo_file ]
Source spamc
Source Path /usr/bin/spamc
Port <Unknown>
Host mail.streetparknyc.com
Source RPM Packages spamassassin-3.4.0-12.fc21.x86_64
Target RPM Packages
Policy RPM selinux-policy-3.13.1-103.fc21.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name mail.streetparknyc.com
Platform Linux mail.streetparknyc.com
3.17.7-300.fc21.x86_64 #1 SMP Wed Dec 17
03:08:44
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
