Cron mail problem with FC6/strict

Christopher J. PeBenito cpebenito at tresys.com
Mon Jan 22 20:47:47 UTC 2007


On Sun, 2007-01-21 at 23:05 +0000, Ted Rule wrote:
> A little while ago, I found that anacron wasn't running correctly under
> FC6/strict, which led to me add a temporary fixup .te for its operation.
> Once I had that in place, I finally received the cron.daily and logwatch
> Emails every day shortly after bootup.
> 
> With that in place, I recently took to leaving the machine powered
> overnight, which of course led to all the Cron jobs running via crond
> instead of anacron.
> 
> Oddly, I noticed that the logwatch Email arrived, but NOT the cron.daily
> summary Email.
> 
> Looking further, I found this odd avc:
> 
> Jan 21 21:29:51 topaz kernel: audit(1169414991.423:988): avc:  denied
> { entrypoint } for  pid=4891 comm="crond" name="sendmail.sendmail"
> dev=hda6 ino=1313020
> scontext=system_u:system_r:system_crond_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:sendmail_exec_t:s0 tclass=file
> 
> i.e. the crond child process running in system_crond_t was apparently
> unable to run sendmail. 

Is this supposed to be cron emailing the output of the cron jobs or the
cron job itself emailing something?

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150




More information about the fedora-selinux-list mailing list