[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
Maybe you have multiple Postfixen installed. Well, I have a kind of HA setup which comprises of three boxes, One of those boxes is a "master" which might (configs/output shown earlier) float, migrate & run on any of of those boxes - just one at any given time - then remaining two "switch" to "r

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 17, 2025 at 07:54:41PM +0200, lejeczek via Postfix-users wrote: > -> $ postconf -Mf | egrep -i '(pickup|qmgr)' > pickup unix  n   -   n   60  1   pickup > qmgr   unix  n   -   n   300 1   qmgr Reasonable so far, can you also post a listi

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > lejeczek via Postfix-users: > > -> $ postconf -Mf | egrep -i '(pickup|qmgr)' > > pickup unix n - n 60 1 pickup > > qmgr unix n - n 300 1 qmgr > > With a similar configuration on my Fedora system

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread Wietse Venema via Postfix-users
lejeczek via Postfix-users: > -> $ postconf -Mf | egrep -i '(pickup|qmgr)' > pickup unix n - n 60 1 pickup > qmgr unix n - n 300 1 qmgr With a similar configuration on my Fedora system the postconf command makes no atttmpt to wri

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
Ii only removed lines with: smtpd_sasl_local_domain & virtual_mailbox_domains, for privacy reason -> $ postconf -nf | egrep -v '(smtpd_sasl_local_domain|virtual_mailbox_domains|jatymy.xyz|ubunt)' | __grepColorIt ubunt alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sa

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
-> $ postconf -Mf | egrep -i '(pickup|qmgr)' pickup unix  n   -   n   60  1   pickup qmgr   unix  n   -   n   300 1   qmgr  in full: -> $ postconf -Mf amavisfeed unix  -   -   n   -   2   lmtp     -o lmtp_data_done_timeout=1200

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 17, 2025 at 07:13:49PM +0200, lejeczek via Postfix-users wrote: > Could it be something that postfix uses, something calls out, a third-party? > There is nothing 'explicit' in my master.cf nor in main.cf which mentions > 'fifo/file'. Can you post your master.cf file, or more precisely

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
Could it be something that postfix uses, something calls out, a third-party? There is nothing 'explicit' in my master.cf nor in main.cf which mentions 'fifo/file'. I find in 'dovecot' which is used for auth (& delivery I think), this: ... service director {   unix_listener login/director {    

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread Wietse Venema via Postfix-users
lejeczek via Postfix-users: > Hi guys. > > I have a seemingly healthy, working postfix yet logs are > full of denials, one specific denial, so I wonder if that is > perhaps some misconfiguration on my part, although again, > all seem to work. > Any/all thoughts are much appreciated. Thanks. Th

[pfx] more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
Hi guys. I have a seemingly healthy, working postfix yet logs are full of denials, one specific denial, so I wonder if that is perhaps some misconfiguration on my part, although again, all seem to work. Any/all thoughts are much appreciated. Thanks. In short, that would be needed (at least)