Postfix and SELinux

Rudi Chiarito nutello at sweetness.com
Tue Mar 30 12:21:21 UTC 2004


On Tue, Mar 30, 2004 at 07:55:24PM +1100, Russell Coker wrote:
> What is this "master" file?  Please run "find / -inum 1407396" and tell me 
> what it reports.

"master" is one of the subprograms that make up postfix. They all reside
in /usr/libexec/postfix and at the moment have a system_u:object_r:lib_t
context.

With your fix, I still get the name=master message, plus these two:

Mar 30 05:56:15 pizza kernel: audit(1080647775.335:0): avc:  denied  {
getattr } for  pid=2310 exe=/usr/sbin/postalias path=/dev/pts/2 dev=
ino=4 scontext=root:system_r:postfix_master_t
tcontext=root:object_r:sysadm_devpts_t tclass=chr_file
Mar 30 05:56:15 pizza kernel: audit(1080647775.381:0): avc:  denied  {
execute_no_trans } for  pid=2312 exe=/bin/bash
path=/usr/libexec/postfix/master dev=sda3 ino=1407394
scontext=root:system_r:postfix_master_t tcontext=system_u:object_r:lib_t
tclass=file

Thank you very much for your help,
Rudi



More information about the fedora-selinux-list mailing list