On Tue, 18 Jul 2017, Stephen Isard wrote:

On Mon, 17 Jul 2017 23:52:22 +0200, Maarten <mailingli...@feedmebits.nl> wrote:

The process exim running with the the selinux context exim_t is trying
to access the directory /proc/net which has the selinux context
sysctl_net_t.

Causing selinux to block access to directory, because the source context
is different from the destination context.

Yes, thank you, I've got that part.  As I said earlier, what I am wondering now 
is why exim is trying to search that directory, and whether I want it to.
It happens at - to me - unpredictable times, apparently unrelated to any 
messages being sent or received.

Looking at the upstream source for exim 4.89, there are two lots of references to /proc 1) /proc/loadavg 2) /proc/net/if_inet6
unsuprisingly exim uses these to determine load average and
IPv6 address etc...

I don't know whether the binary rpms add any other uses of /proc
- which version of exim are you using - the one from epel ?

--
Andrew C Aitchison                                      Cambridge, UK

Reply via email to