Sendmail 8.14 selinux

Daniel J Walsh dwalsh at redhat.com
Mon Dec 31 20:44:09 UTC 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Harley Race wrote:
> Ladies and Gentlemen,
> 
> If I can get some help here.  I am running Fedora 8
> with sendmail 8.14.2.  I have been getting the
> following messages in audit.log.  I am not really sure
> what to make of them either.  Sendmail runs.  Errors
> are listed below:
> 
> type=AVC msg=audit(1198878517.713:16): avc:  denied  {
> signull } for  pid=3153 comm="sendmail"
> scontext=system_u:system_r:sendmail_t:s0
> tcontext=system_u:system_r:sendmail_t:s0
> tclass=process
> type=SYSCALL msg=audit(1198878517.713:16):
> arch=40000003 syscall=37 success=no exit=-13 a0=10fd
> a1=0 a2=b7f3731c a3=84 items=0 ppid=1 pid=3153
> auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
> egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail"
> exe="/usr/sbin/sendmail.sendmail"
> subj=system_u:system_r:sendmail_t:s0 key=(null)
> 
> Sorry about the formatting, this webmail interface
> does not support elaborate formatting.
> 
> 
> 
>       ____________________________________________________________________________________
> Be a better friend, newshound, and 
> know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
I will add this to the next upgrade of selinux policy.

You can add it yourself by executing

# grep signull /var/log/audit/audit.log | audit2allow -M mysendmail
# semodule -i mysendmail.pp

Fixed in selinux-policy-3.0.8-73
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkd5VJkACgkQrlYvE4MpobP99gCgofL5GC3+NqFKKp3xhBXmc/b7
WxQAoL4JPgFUuVwjVkC7gxjl+6cYQRqy
=dV96
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list