procmail-related selinux messages

[Jim Cornette]

Jens Petersen wrote:
>>>>>>"Jens" == Jens Petersen <petersen at redhat.com> writes:
> 
> 
>     Jens> With pre-test3 devel in enforcing mode I see avc
>     Jens> messages from procmail being called by sendmail
>     Jens> too:
> 
> Erm, actually, those messages were appearing (in enforcing
> mode) because the account I was testing with was defaulting
> to user_u:sysadmin_r:sysadmin_t somehow.  With policy-1.10.2-5
> and using user_u:user_r:user_t I don't see any avc messages
> at all for local procmail delivery. :)
> 
> Jens
> 
>


I had the same default policy for the regular user mentioned above. I 
couldn't login to X, but could work in the terminal applications alright.

I didn't know to try a policy of user_u:user_r:user_t - local mail was 
"delivered" to /dev/null or a location that I have no idea as to where 
to locate.

There were plenty of messages until I closed down mutt. They are 
unlocatable now, filed with avc errors mostly.

Thanks for the hint on policy.

Jim