sendmail avc's - on a system upgraded from f7 to f8 - in <Unknown>

Daniel J Walsh dwalsh at redhat.com
Tue Feb 5 13:37:06 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel J Walsh wrote:
> David Timms wrote:
>> Paul Howarth wrote:
>>> Might you have installed VMware?
>> Correct.
> 
>>> Mangling the context of /etc/services
>>> to rpm_script_tmp_t is a long-standing bug in the VMware package
>>> scripts.
>> # ls -lZ /etc/serv*
>> -rw-r--r--  root root system_u:object_r:etc_t          /etc/services
> 
>> # rpm -Uvh --replacepkgs VMware-server-1.0.4-56528.i386.rpm
>> Preparing...        ########################################### [100%]
>>    1:VMware-server  ########################################### [100%]
> 
>> # ls -lZ /etc/serv*
>> -rw-r--r--  root root unconfined_u:object_r:rpm_script_tmp_t /etc/services
> 
>> Searching the vmware forums found the identical cause leading to slghtly
>> different selinux symptoms - logging not working, and a comment form
>> myself in there:
>> http://communities.vmware.com/message/856343#856343
>> referencing:
>> http://www.redhat.com/archives/fedora-list/2007-April/msg00780.html ,794
> 
>> and another on using vmware-server with F8:
>> http://communities.vmware.com/message/856343#856343
>> which didn't stop me, but helped others.
> 
>> Actually, I submitted a vmware "defect report" to this effect.
> 
>> A secondary question: is there a way in which troubleshoot browser could
>> be improved to point the finger at the correct cause / solution ?
>> Or is the effort best spent in getting vmware to script the install more
>> carefully ?
> 
>> DaveT.
>> "short memory, must have a, short memory" - midnight oil
> 
>> -- 
>> fedora-selinux-list mailing list
>> fedora-selinux-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> You can also use restorecond to watch this file in the future.
> 
> 
Or even better use xen of qemu for free:^)
- --
fedora-selinux-list mailing list
fedora-selinux-list at redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkeoZoIACgkQrlYvE4MpobNydQCeKmmHw5VVduMJnFAOJo0kMf/a
epQAnAiy+SuUaYp60Lu+nxGdR3wqSfzT
=WkZO
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list