sendmail avc's - on a system upgraded from f7 to f8 - in <Unknown>

Daniel J Walsh dwalsh at redhat.com
Tue Feb 5 13:35:43 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Timms wrote:
> Paul Howarth wrote:
>> Might you have installed VMware?
> Correct.
> 
>> Mangling the context of /etc/services
>> to rpm_script_tmp_t is a long-standing bug in the VMware package
>> scripts.
> 
> # ls -lZ /etc/serv*
> -rw-r--r--  root root system_u:object_r:etc_t          /etc/services
> 
> # rpm -Uvh --replacepkgs VMware-server-1.0.4-56528.i386.rpm
> Preparing...        ########################################### [100%]
>    1:VMware-server  ########################################### [100%]
> 
> # ls -lZ /etc/serv*
> -rw-r--r--  root root unconfined_u:object_r:rpm_script_tmp_t /etc/services
> 
> Searching the vmware forums found the identical cause leading to slghtly
> different selinux symptoms - logging not working, and a comment form
> myself in there:
> http://communities.vmware.com/message/856343#856343
> referencing:
> http://www.redhat.com/archives/fedora-list/2007-April/msg00780.html ,794
> 
> and another on using vmware-server with F8:
> http://communities.vmware.com/message/856343#856343
> which didn't stop me, but helped others.
> 
> Actually, I submitted a vmware "defect report" to this effect.
> 
> A secondary question: is there a way in which troubleshoot browser could
> be improved to point the finger at the correct cause / solution ?
> Or is the effort best spent in getting vmware to script the install more
> carefully ?
> 
> DaveT.
> "short memory, must have a, short memory" - midnight oil
> 
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
You can also use restorecond to watch this file in the future.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkeoZi8ACgkQrlYvE4MpobNlXACfdVrriTAJn8M75khsnvGSwf4R
gd8An3+lsgyuJFqks3UHsf0pndc2dkZ7
=eTba
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list