Re: general selinux questions

[antoine <antoine@nagafix.co.uk>]

> > audit(1118762231.596:0): avc:  denied  { transition } for  pid=28871
> > exe=/usr/lib/postfix/master path=/usr/lib/postfix/pipe dev=md3
> > ino=670776 scontext=system_u:system_r:postfix_master_t
> > tcontext=system_u:object_r:postfix_pipe_t tclass=process
> > So I've added this to postfix.te (from audit2allow):
> > allow postfix_master_t postfix_pipe_t:process transition;
> > But it has no effect and the same audit message keeps coming up!
> > I have absolutely no idea where to go from here...
> 
> Tried audit2why?  Could be constraints or RBAC denial.
Many thanks, it helped! I thought I had tried it but I needed one of:
role system_r types postfix_pipe_t;
role system_r types postfix_master_t;

Antoine (now in enforcing mode!)


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.