Product: Fedora EPEL https://bugzilla.redhat.com/show_bug.cgi?id=879007
Bug ID: 879007 Summary: SELinux errors with temporary files Product: Fedora EPEL Version: el6 Component: dspam Severity: unspecified Priority: unspecified Reporter: mcepl@redhat.com
Created attachment 649380 --> https://bugzilla.redhat.com/attachment.cgi?id=649380&action=edit output of ausearch -m AVC -ts today
Description of problem: #============= httpd_suexec_t ============== allow httpd_suexec_t httpd_tmp_t:file { read write };
#============= httpd_sys_script_t ============== allow httpd_sys_script_t devlog_t:sock_file write; allow httpd_sys_script_t syslogd_t:unix_dgram_socket sendto;
see attached output of
ausearch -m AVC -ts today
Version-Release number of selected component (if applicable): dspam-3.10.2-2.el6.i686 selinux-policy-targeted-3.7.19-181.el6.noarch
https://bugzilla.redhat.com/show_bug.cgi?id=879007
Miroslav Grepl mgrepl@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1060653
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1060653 [Bug 1060653] SELinux errors with temporary files
https://bugzilla.redhat.com/show_bug.cgi?id=879007
Miroslav Grepl mgrepl@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mcepl@redhat.com Flags| |needinfo?(mcepl@redhat.com)
--- Comment #1 from Miroslav Grepl mgrepl@redhat.com --- Did it work with
#============= httpd_sys_script_t ============== allow httpd_sys_script_t devlog_t:sock_file write; allow httpd_sys_script_t syslogd_t:unix_dgram_socket sendto;
or did you also need to have
#============= httpd_suexec_t ============== allow httpd_suexec_t httpd_tmp_t:file { read write };
https://bugzilla.redhat.com/show_bug.cgi?id=879007
Matěj Cepl mcepl@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(mcepl@redhat.com) |
--- Comment #2 from Matěj Cepl mcepl@redhat.com --- I am sorry, I have given up on dspam a long time ago (it is just too bloody complicated comparing to the plain bogofilter). You can close this as INSUFFICIENT_DATA.
perl-devel@lists.fedoraproject.org