sendmail.postfix avc denied problem

[Edy Corak]

Daniel J Walsh wrote:
> Edy Corak wrote:
> 
>> Helo List,
>>
>> i have a problem sending mail from php script.
>>
>> audit(1101900916.389:0): avc:  denied  { getattr } for  pid=18363 
>> exe=/bin/bash path=/usr/sbin/sendmail.postfix dev=md0 ino=7518272 
>> scontext=root:system_r:httpd_sys_script_t 
>> tcontext=system_u:object_r:sbin_t tclass=file
>>
>> Everything other works very good with SELinux.
>>
>> System FC3 Postfix, SELinux enforcing, targeted.
>>
>> Thank you for any help.
>>
> Update to the latest policy, should fix this problem.
> 
> Dan
> 
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
> 
Thank you very much for your prompt answer.

I have updated the policy-targeted to 1.17.30-2.39 but it's the same 
problem, no chance to send mail from php script.

audit(1102024220.525:0): avc:  denied  { getattr } for  pid=8178 
exe=/bin/bash path=/usr/sbin/sendmail.postfix dev=md0 ino=7513871 
scontext=root:system_r:httpd_sys_script_t 
tcontext=system_u:object_r:sbin_t tclass=file

I look at the policy-targeted-source under file_contexts in postfix.fc 
there is
sendmail.postfix labeled as /usr/sbin/sendmail.postfix -- 
system_u:object_r:sendmail_exec_t

and under /usr/sbin as system_u:object_r:sbin_t         sendmail.postfix

rpm -q -l postfix | restorecon -R -v -f - changes to
system_u:object_r:sbin_t         sendmail.postfix

which of them is correct ?

Sorry for my bad reply before, next time i start i will right click to new.

Thank you very much

Edy


-- 


Edy Corak

E-Mail: info at ecorak.de
Internet: http://www.ecorak.net/

-----