SELinux warning about sendmail

[Daniel J Walsh]

On 07/10/2009 06:09 PM, Andras Simon wrote:
> Sometimes I see the warning:
> 
> SELinux is preventing the sendmail from using potentially mislabeled files
> (/root).
> 
> sendmail is not installed, but according to sealert, this warning is
> really about ssmtp.
> Of course I'm not trying to mail any file from /root, in fact, I don't
> mail anything. Any idea what might be going on?
> 
> Andras
> 
What is the AVC.  It might be just doing a getattr of /root which could trigger an AVC.

When an app starts with it's homedir set to /root, it will getattr on the $HOME, which can cause this AVC.  Usually these are dontaudited.  So I would need to see the AVC to understand what it is complaining about.

grep avc /var/log/audit/audit.log