[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [FC3] Squirrel Mail / SELinux

Randy wrote:
M.Lewis wrote:

I'm having a problem logging into Squirrel Mail. I have the following in the log:

Jun 29 14:40:40 cygnus kernel: audit(1120081240.918:0): avc: denied { connect } for pid=4379 exe=/usr/sbin/httpd scontext=user_u:system_r:httpd_ttcontext=user_u:system_r:httpd_t tclass=tcp_socket

Earlier today, I did the procedure that's been described in the past week by Alexander I believe:

su -
rpm -ev selinux-policy-targeted selinux-policy-targeted-sources
rm -fR /etc/selinux/targeted/
rpm -ivh /var/cache/yum/updates-released/packages/selinux-policy-targeted-1.17.30-3.9.noarch.rpm /var/cache/yum/updates-released/packages/selinux-policy-targeted-sources-1.17.30-3.9.noarch.rpm

touch /.autorelabel

Still I'm having the error shown above. Suggestions?


I ended up doing this to get it to work:

setsebool -P httpd_can_network_connect=1
setsebool -P dovecot_disable_trans=1

Now that SELinux doesn't mess with Dovecot, and the http flag is changed, Dovecot can connect to http. I also had to change some SELinux settings before I could get to any files through SAMBA, and more to get my WAN link to come up on boot. When SELinux prevented me from getting/putting files to my home directory and ALSO prevented me from cd'ing out of my home directory, I ended up disabling it completely. Now eveything works. :-)

Use: setenforce 0 to temporarily disable SELinux to see if it fixes things
that are broke. It'll re-enable the next time you reboot.

(apologies if this shows up on the list multiple times. I was having mail trouble and it looked like nothing was getting through)

I applied the two updated files that Dan posted: - selinux-policy-targeted-1.17.30-3.16.noarch.rpm - selinux-policy-targeted-sources-1.17.30-3.16.noarch.rpm

I still get the same results as before.


 I haven't lost my mind; it's backed up on tape somewhere.
  18:15:01 up  5:46,  5 users,  load average: 0.00, 0.03, 0.08

 Linux Registered User #241685  http://counter.li.org

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]