Two SELINUX Problems with YP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bugzilla keeps giving me blank pages when I try to submit a bug so I
thought I'd get these out here at least. Selinux is blocking dovecot and
saslauthd from authenticating yp users. The audit log looks like this:

type=SYSCALL msg=audit(1116857414.990:8599907): syscall=2 arch=c000003e success=no exit=-13 a0=7fffff875a10 a1=0 a2=15 a3=2aaaab38f9c0 items=1 pid=7267 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=PATH msg=audit(1116857414.990:8599907): item=0 name="/var/yp/binding/rcc.2" inode=1933353 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00
type=AVC msg=audit(1116857414.990:8599914): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857414.990:8599914): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7267 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857414.990:8599917): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857414.990:8599917): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7267 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857414.991:8599934): avc:  denied  { search } for  name=yp dev=dm-0 ino=1933353 scontext=root:system_r:dovecot_auth_t tcontext=system_u:object_r:var_yp_t tclass=dir
type=SYSCALL msg=audit(1116857414.991:8599934): syscall=2 arch=c000003e success=no exit=-13 a0=7fffff875950 a1=0 a2=15 a3=0 items=1 pid=7267 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=PATH msg=audit(1116857414.991:8599934): item=0 name="/var/yp/binding/rcc.2" inode=1933353 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00
type=AVC msg=audit(1116857414.991:8599947): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857414.991:8599947): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7267 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857414.991:8599949): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857414.991:8599949): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7267 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857427.100:8619891): avc:  denied  { search } for  name=yp dev=dm-0 ino=1933353 scontext=root:system_r:dovecot_auth_t tcontext=system_u:object_r:var_yp_t tclass=dir
type=SYSCALL msg=audit(1116857427.100:8619891): syscall=2 arch=c000003e success=no exit=-13 a0=7fffff875a10 a1=0 a2=15 a3=2aaaab38f9c0 items=1 pid=7277 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=PATH msg=audit(1116857427.100:8619891): item=0 name="/var/yp/binding/rcc.2" inode=1933353 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00
type=AVC msg=audit(1116857427.100:8619892): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857427.100:8619892): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7277 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857427.100:8619895): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857427.100:8619895): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7277 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857427.100:8619906): avc:  denied  { search } for  name=yp dev=dm-0 ino=1933353 scontext=root:system_r:dovecot_auth_t tcontext=system_u:object_r:var_yp_t tclass=dir
type=SYSCALL msg=audit(1116857427.100:8619906): syscall=2 arch=c000003e success=no exit=-13 a0=7fffff875950 a1=0 a2=15 a3=0 items=1 pid=7277 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=PATH msg=audit(1116857427.100:8619906): item=0 name="/var/yp/binding/rcc.2" inode=1933353 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00
type=AVC msg=audit(1116857427.100:8619907): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857427.100:8619907): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7277 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth
type=AVC msg=audit(1116857427.100:8619909): avc:  denied  { create } for  scontext=root:system_r:dovecot_auth_t tcontext=root:system_r:dovecot_auth_t tclass=tcp_socket
type=SYSCALL msg=audit(1116857427.100:8619909): syscall=41 arch=c000003e success=no exit=-13 a0=2 a1=1 a2=6 a3=4 items=0 pid=7277 loginuid=-1 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm=dovecot-auth exe=/usr/libexec/dovecot/dovecot-auth

I'll try to submit bugs again later.

tjb
-- 
=======================================================================
| Thomas Baker                                  email: tjb@xxxxxxx    |
| Systems Programmer                                                  |
| Research Computing Center                     voice: (603) 862-4490 |
| University of New Hampshire                     fax: (603) 862-1761 |
| 332 Morse Hall                                                      |
| Durham, NH 03824 USA              http://wintermute.sr.unh.edu/~tjb |
=======================================================================


[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]