procmail-related selinux messages

[Thomas Molina]

On Mon, 12 Apr 2004, Jens Petersen wrote:

> Are you running permissive mode btw?  With pre-test3 devel
> in enforcing mode I see avc messages from procmail being
> called by sendmail too:
> 
> audit(1081739775.225:0): avc:  denied  { read } for
> pid=2155 exe=/usr/sbin/sendmail.sendmail name=self dev= ino=2 scontext=user_u:sysadm_r:sysadm_mail_t tcontext=system_u:object_r:proc_t tclass=lnk_file
> audit(1081739775.313:0): avc:  denied  { getattr } for  pid=2158 exe=/usr/bin/procmail path=/home/petersen/.procmailrc dev=hda2 ino=4578576 scontext=system_u:system_r:procmail_t tcontext=user_u:object_r:home_root_t tclass=file
> audit(1081739775.313:0): avc:  denied  { read } for  pid=2158 exe=/usr/bin/procmail name=.procmailrc dev=hda2 ino=4578576 scontext=system_u:system_r:procmail_t tcontext=user_u:object_r:home_root_t tclass=file
> 
> Anyway could you please report the problem in bugzilla and I
> will try to look into it more.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120620