Re: general selinux questions

[antoine <antoine@nagafix.co.uk>]

On Thu, 2005-06-23 at 13:55 -0400, Stephen Smalley wrote:
> On Thu, 2005-06-23 at 13:44 -0400, Stephen Smalley wrote:
> > On Thu, 2005-06-23 at 18:41 +0100, antoine wrote:
> > > I removed the change, so now I can start postfix again without problems,
> > > but I am back where I started with spamd:
> > > 
> > > audit(1119545469.251:0): avc:  denied  { transition } for  pid=19693
> > > exe=/usr/bin/spamc path=/usr/sbin/sendmail dev=md3 ino=783481
> > > scontext=system_u:system_r:spamd_t
> > > tcontext=system_u:object_r:postfix_pipe_t tclass=process
> > 
> > Again, object_r in process context.
Thanks, I found it. In another .te file I was allowing sysadm_r to
become object_r... I guess this took precedence over running sendmail as
system_u:system_r:postfix_pipe_t
Can this (somewhat dumb error I'll admit) be prevented with a neverallow
type of check?

Thanks
Antoine


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.