On Tue, 05 Feb 2008 08:23:43 +1100 David Timms dtimms@iinet.net.au wrote:
Daniel J Walsh wrote:
David Timms wrote:
AFAICS, I haven't made any configs to sendmail, yet I've started to get lots of AVC warnings in setroubleshoot, of three particular types:
1:======== Summary SELinux is preventing the /usr/sbin/sendmail.sendmail from using potentially mislabeled files (<Unknown>).
Detailed Description SELinux has denied /usr/sbin/sendmail.sendmail access to potentially mislabeled file(s) (<Unknown>). This means that SELinux will not allow
A postinstall script has ruined the labeling on your /etc/services file.
# restorecon -v /etc/services will fix
# ls -lZ /etc/services -rw-r--r-- root root unconfined_u:object_r:rpm_script_tmp_t /etc/services Yes, you are correct.
# restorecon -v /etc/services restorecon reset /etc/services context unconfined_u:object_r:rpm_script_tmp_t:s0->system_u:object_r:etc_t:s0
I guess experience rather than reading the troubleshoot message led you to /etc/services ?
If you any idea which rpm did this. I would like to know.
yum.logs--- I'l try to narrow it down, not sure how. I can't remember now exactly what I was doing around the date that it started occurring. ===
Might you have installed VMware? Mangling the context of /etc/services to rpm_script_tmp_t is a long-standing bug in the VMware package scripts.
Paul.