Is SELinux blocking all forward-only mail agents? (esmtp/ssmtp)

Daniel J Walsh dwalsh at redhat.com
Wed Dec 17 16:04:40 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Manuel Wolfshant wrote:
> On 12/15/2008 04:22 PM, Daniel J Walsh wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> NM wrote:
>>  
>>> On Fri, 12 Dec 2008 10:18:52 +0000, Paul Howarth wrote:
>>>
>>>    
>>>> Long term, policy for this type of forwarder would need to be written.
>>>>
>>>> Short term, you could try re-using the sendmail policy:
>>>>
>>>> e.g.
>>>> # chcon -t sendmail_exec_t /path/to/ssmtp
>>>>
>>>> See if that helps.
>>>>       
>>> Thanks, will try.
>>>
>>>     
>> I will add labeling for
>>
>>
>> /usr/sbin/ssmtp         --
>> gen_context(system_u:object_r:sendmail_exec_t,s0)
>> /usr/bin/esmtp            --
>> gen_context(system_u:object_r:sendmail_exec_t,s0)
>>
>> To the policy packages.
>>   
> Thanks, Dan!
> Now, asking as maintainer of these packages in EPEL: any chance of
> propagating this policy changes to RHEL 4/5 ?
> 
> 
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
5.3 policy currently preview at selinux-policy-2.4.6-201.el5  will have
the fixed labeling.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAklJIxgACgkQrlYvE4MpobMoWgCdGXQWEFLWiR4WKkRqzMiLuNyh
jgEAoLyN4Ns4ogcw5iNkp00A6JPGimqX
=HZX5
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list