Allow apache to send mail?

[Daniel J Walsh]

Robin Bowes wrote:
> Hi,
>
> Can anyone tell me how to allow apache (httpd) to send mail, i.e. to use
> the smtp port?
>
> I'm trying to enable notifications in Trac and am seeing this in the
> audit log:
>
> type=AVC msg=audit(1133985478.317:38): avc:  denied  { name_connect }
> for  pid=2175 comm="httpd" dest=25 scontext=system_u:system_r:httpd_t
> tcontext=system_u:object_r:smtp_port_t tclass=tcp_socket
> type=SYSCALL msg=audit(1133985478.317:38): arch=c000003e syscall=42
> success=no exit=-13 a0=11 a1=2aaab21569f0 a2=10 a3=0 items=0 pid=2175
> auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48
> fsgid=48 comm="httpd" exe="/usr/sbin/httpd"
> type=SOCKADDR msg=audit(1133985478.317:38):
> saddr=020000195433A04E0000000000000000
>
> How do I modify my policy to allow this?
>
> Thanks,
>
> R.
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   
Easiest way is

setsebool -P httpd_can_network_connect=1

--