On Tue, Mar 30, 2004 at 07:55:24PM +1100, Russell Coker wrote:
What is this "master" file? Please run "find / -inum 1407396" and tell me what it reports.
"master" is one of the subprograms that make up postfix. They all reside in /usr/libexec/postfix and at the moment have a system_u:object_r:lib_t context.
With your fix, I still get the name=master message, plus these two:
Mar 30 05:56:15 pizza kernel: audit(1080647775.335:0): avc: denied { getattr } for pid=2310 exe=/usr/sbin/postalias path=/dev/pts/2 dev= ino=4 scontext=root:system_r:postfix_master_t tcontext=root:object_r:sysadm_devpts_t tclass=chr_file Mar 30 05:56:15 pizza kernel: audit(1080647775.381:0): avc: denied { execute_no_trans } for pid=2312 exe=/bin/bash path=/usr/libexec/postfix/master dev=sda3 ino=1407394 scontext=root:system_r:postfix_master_t tcontext=system_u:object_r:lib_t tclass=file
Thank you very much for your help, Rudi