FC4 last updates kill postfix+postgrey

[Andy Green]

Andy Green wrote:

> Sep 27 14:08:56 siamese postfix/smtpd[13486]: warning: connect to
> /var/spool/postfix/postgrey/socket: Permission denied
...
> However there are no avc complaints in /var/log/messages.  Turning off

I discover /var/log/audit/audit.log ... much neater once you know about
it :-)  This is the AVC message:

type=AVC msg=audit(1127827818.253:472): avc:  denied  { connectto } for
 pid=13783 comm="smtpd" name="socket"
scontext=root:system_r:postfix_smtpd_t tcontext=root:system_r:initrc_t
tclass=unix_stream_socket
type=SYSCALL msg=audit(1127827818.253:472): arch=c000003e syscall=42
success=yes exit=0 a0=14 a1=7fffffa59ec0 a2=6e a3=7fffffa59ec2 items=1
pid=13783 auid=500 uid=89 gid=89 euid=89 suid=89 fsuid=89 egid=89
sgid=89 fsgid=89 comm="smtpd" exe="/usr/libexec/postfix/smtpd"
type=AVC_PATH msg=audit(1127827818.253:472):
path="/var/spool/postfix/postgrey/socket"
type=SOCKADDR msg=audit(1127827818.253:472):
saddr=01002F7661722F73706F6F6C2F706F73746669782F706F7374677265792F736F636B65740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
type=PATH msg=audit(1127827818.253:472): item=0 flags=1  inode=3342296
dev=fd:00 mode=0140666 ouid=95 ogid=99 rdev=00:00

-Andy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4492 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20050927/9ef2e0f2/attachment.bin>