postfix with maildir delivery

[Anne Wilson]

On Wednesday 23 April 2008 05:59, freeslkr wrote:
> Hello,
>
> I'm trying out SELinux on Fedora 8 in permissive mode. I get AVCs
> everytime postfix delivers mail to the maildir directories. It looks
> like postfix doesn't have permission to create files. For example,
>
> from /var/log/messages:
>
> 	SELinux is preventing local (postfix_local_t) "link" to
> 	./1208923427.P3686.myhost (mail_spool_t)
>
> from /var/log/audit/audit.log:
>
> 	type=AVC msg=audit(1208923427.350:95): avc: denied { link } for
> 	pid=3686 comm="local" name="1208923427.P3686.myhost" dev=dm-3
> 	ino=819271 scontext=system_u:system_r:postfix_local_t:s0
> 	tcontext=system_u:object_r:mail_spool_t:s0 tclass=file
>
> 	type=SYSCALL msg=audit(1208923427.350:95): arch=c000003e
> 	syscall=86 success=yes exit=0 a0=2aaaaad599c0 a1=2aaaaad59ba0
> 	a2=0 a3=0 items=0 ppid=2371 pid=3686 auid=4294967295 uid=0 gid=0
> 	euid=1000 suid=0 fsuid=1000 egid=1000 sgid=0 fsgid=1000 tty=(none)
> 	comm="local" exe="/usr/libexec/postfix/local"
> 	subj=system_u:system_r:postfix_local_t:s0 key=(null)
>
> Is my interpretation correct. If so, is it likely that this could be
> corrected in a future policy version?
>
Try 'sealert -b' and find the message relating to this.  It will give you a 
command to run, to tell selinux that you need this.

Anne