How to let squirrelspell work in selinux?

[Hongwei Li]

Hi,

I got the following error in system log when I click "Check Spelling" in
SquirrelMail 1.4.3a of my fc3 linux system:

Feb 14 09:36:02 pippo kernel: audit(1108395362.621:0): avc:  denied  {
search } for  pid=10663 exe=/bin/cat name=spool dev=hda3 ino=470497
scontext=root:system_r:httpd_sys_script_t
tcontext=system_u:object_r:var_spool_t tclass=dir

The "Cehck Spelling" calls SquirrelSpell v0.3.8, which works well if
selinux is disabled.  But, I'd like to have selinux enforced.  My system:

os:             RedHat FC3 linux, kernel-2.6.10-1.741_FC3, selinux
enforced, iptables enabled
selinux:        selinux-policy-targeted-1.17.30-2.73
iptables:       iptables-1.2.11-3.1.FC3


Can somebody tell me how to fix this problem?

Thanks a lot!

Hongwei Li