postfix, procmail and SELinux - No Go

Marc Schwartz (via MN) mschwartz at mn.rr.com
Wed Jun 21 20:23:18 UTC 2006


On Wed, 2006-06-21 at 21:07 +0100, Paul Howarth wrote:
> On Wed, 2006-06-21 at 15:01 -0500, Marc Schwartz (via MN) wrote:
> > On Wed, 2006-06-21 at 20:55 +0100, Paul Howarth wrote:
> > > On Wed, 2006-06-21 at 14:25 -0500, Marc Schwartz (via MN) wrote:
> > > > On Wed, 2006-06-21 at 13:57 -0500, Marc Schwartz (via MN) wrote:
> > > > > Just to be clear, I should leave or remove the mydcc policy?
> > > > 
> > > > Paul,
> > > > 
> > > > I am getting errors when building the dcc and razor policies:
> > > > 
> > > > dcc.if:23: duplicate definition of dcc_domtrans_cdcc(). Original definition on 23.
> > > > dcc.if:54: duplicate definition of dcc_run_cdcc(). Original definition on 54.
> > > > dcc.if:76: duplicate definition of dcc_domtrans_client(). Original definition on 76.
> > > > dcc.if:107: duplicate definition of dcc_run_client(). Original definition on 107.
> > > > dcc.if:129: duplicate definition of dcc_domtrans_dbclean(). Original definition on 129.
> > > > dcc.if:160: duplicate definition of dcc_run_dbclean(). Original definition on 160.
> > > > dcc.if:181: duplicate definition of dcc_stream_connect_dccifd(). Original definition on 181.
> > > > razor.if:101: duplicate definition of razor_common_domain_template(). Original definition on 101.
> > > > razor.if:197: duplicate definition of razor_per_userdomain_template(). Original definition on 197.
> > > > razor.if:218: duplicate definition of razor_domtrans(). Original definition on 218.
> > > > 
> > > > The modules do seem to build and install however. 
> > > > 
> > > > I do believe that I answered my own question above, in that the dcc
> > > > policy will not load with the mydcc policy loaded.
> > > > 
> > > > Current status:
> > > > 
> > > > # semodule -l
> > > > amavis  1.0.4
> > > > clamav  1.0.1
> > > > dcc     1.0.0
> > > > myclamscan      0.2.0
> > > > mypyzor 0.2.1
> > > > procmail        0.5.3
> > > > pyzor   1.0.1
> > > > razor   1.0.0
> > > 
> > > Did you do the restorecon of all your dcc and razor files/directories
> > > too (the .fc files should indicate where you'd expect to find things)?
> > 
> > Yep.  I actually use 'locate razor' and 'locate dcc', since several of
> > the paths listed in the .fc files are not present.
> > 
> > I also then ran a 'fixfiles check' which came back with no errors,
> > though as we have seen previously, that seems to be no guarantee of
> > anything...
> 
> Can you remind me where the files are actually installed on your system
> (presumably upstream default locations?)?
> 
> Some may need adding to the .fc files.

/var/dcc/*  and sub-dirs

/usr/bin/razor*

/root/.razor/*

/.razor/*



dcc was installed from the upstream tarball at Rhyolite.  It is not in
FE.  Built with default options.

razor is installed via FE with perl-Razor-Agent-2.77-3.fc5.

pyzor is also from FE with pyzor-0.4.0-9.fc4. Presumably the RPM naming
should be updated to fc5?

Marc





More information about the fedora-selinux-list mailing list