https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6052





--- Comment #4 from Kevin Jones <[email protected]>  2009-01-28 
19:50:03 PST ---
Yea you guys are right this has nada to do with spamc. I send an email through
the system and then the selinux error comes up. I think selinux just needs to
be updated to ignore this, unless there is some reason why I shouldn't be
sending my mail through spamassassin in /etc/procmailrc? I don't bother to load
spamd because my system only receives a tiny amount of email right now.

Contents of /etc/procmailrc
:0fw spamassassin.lock
* < 256000
| /usr/bin/spamassassin

I did create an alias for root to a user and ran the tool to update the alias
database. Hmmmm I'll see what happens with a selinux bug report. thanks for the
help



Summary:

SELinux is preventing spamassassin (spamc_t) "write" postfix_local_t.

Detailed Description:

SELinux denied access requested by spamassassin. It is not expected that this
access is required by spamassassin and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Additional Information:

Source Context                unconfined_u:system_r:spamc_t:s0
Target Context                unconfined_u:system_r:postfix_local_t:s0
Target Objects                pipe [ fifo_file ]
Source                        spamassassin
Source Path                   /usr/bin/perl
Port                          <Unknown>
Host                          wild-missouri.dyndns.org
Source RPM Packages           perl-5.10.0-53.fc10
Target RPM Packages           
Policy RPM                    selinux-policy-3.5.13-40.fc10
Selinux Enabled               True
Policy Type                   targeted
MLS Enabled                   True
Enforcing Mode                Enforcing
Plugin Name                   catchall
Host Name                     wild-missouri.dyndns.org
Platform                      Linux wild-missouri.dyndns.org
                              2.6.27.12-170.2.5.fc10.i686 #1 SMP Wed Jan 21
                              02:09:37 EST 2009 i686 i686
Alert Count                   7
First Seen                    Sat 24 Jan 2009 10:42:44 PM EST
Last Seen                     Tue 27 Jan 2009 12:39:58 PM EST
Local ID                      1757aec7-125c-471c-81af-64bc96349033
Line Numbers                  

Raw Audit Messages            

node=wild-missouri.dyndns.org type=AVC msg=audit(1233077998.752:64): avc: 
denied  { write } for  pid=3561 comm="spamassassin" path="pipe:[18009]"
dev=pipefs ino=18009 scontext=unconfined_u:system_r:spamc_t:s0
tcontext=unconfined_u:system_r:postfix_local_t:s0 tclass=fifo_file

node=wild-missouri.dyndns.org type=SYSCALL msg=audit(1233077998.752:64):
arch=40000003 syscall=11 success=yes exit=0 a0=964cdb8 a1=964c008 a2=964eba0
a3=1 items=0 ppid=3560 pid=3561 auid=4294967295 uid=500 gid=500 euid=500
suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295
comm="spamassassin" exe="/usr/bin/perl" subj=unconfined_u:system_r:spamc_t:s0
key=(null)


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to