Postfix avcs (Re: Enabling SELinux on a custom kernel)

[Jan Kasprzak]

Jan Kasprzak wrote:
: > /etc/selinux/targeted/modules/active/seusers
: > /etc/selinux/targeted/modules/active/users_extra.local
: > /etc/selinux/targeted/modules/active/users.local

	I have copied those three files from the fresh F9 system
to the system in question, and it seems that after semodule -i localpostfix.pp
Postfix finally works. However, the "semodule -i localpostfix.pp"
command still takes 2-3 minutes of CPU time to finish. At least
it doesn't complain anymore.

# time semodule -i localpostfix.pp

real	2m55.839s
user	2m54.195s
sys	0m1.593s
# echo $?
0


-Yenya

-- 
| Jan "Yenya" Kasprzak  <kas at {fi.muni.cz - work | yenya.net - private}> |
| GPG: ID 1024/D3498839      Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |
| http://www.fi.muni.cz/~kas/    Journal: http://www.fi.muni.cz/~kas/blog/ |
>>  If you find yourself arguing with Alan Cox, you’re _probably_ wrong.  <<
>>     --James Morris in "How and Why You Should Become a Kernel Hacker"  <<