[Bug 1848125] New: amavisd fails to start in multiple port config

https://bugzilla.redhat.com/show_bug.cgi?id=1848125

            Bug ID: 1848125
           Summary: amavisd fails to start in multiple port config
           Product: Fedora
           Version: 32
          Hardware: x86_64
                OS: Linux
            Status: NEW
         Component: amavisd-new
          Severity: high
          Assignee: j.orti.alcaine(a)gmail.com
          Reporter: dan(a)islenet.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: janfrode(a)tanso.net, j.orti.alcaine(a)gmail.com,
                    perl-devel(a)lists.fedoraproject.org, steve(a)silug.org,
                    vanmeeuwen+fedora(a)kolabsys.com
  Target Milestone: ---
    Classification: Fedora



amavisd fails to start using recommend 2 port configuration:

$inet_socket_port = [10024,10026];  # listen on multiple TCP ports

The failure occurs because the selinux-policy has labelled port 10026 as for
use by spamd.

[root]# semanage port -l | grep spamd
spamd_port_t                   tcp      783, 10026, 10027

Another port could be used as a workaround but it would be helpful for the
amavisd and selinux team to identify another recommended port for the 2nd
instance which would be properly labeled in the selinux policy.


-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1848125] amavisd fails to start in multiple port config

https://bugzilla.redhat.com/show_bug.cgi?id=1848125



--- Comment #1 from dan(a)islenet.com ---
This is a bit more complex that I thought.  In trying to move the receive/send
functions from 10026/10027 to 10036/10037 I was still being blocked by policy
until I added:

semanage port -a -t amavisd_recv_port_t  -p tcp 10036
semanage port -a -t amavisd_send_port_t  -p tcp 10037


-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1848125] amavisd fails to start in multiple port config

https://bugzilla.redhat.com/show_bug.cgi?id=1848125

Juan Orti Alcaine <j.orti.alcaine(a)gmail.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |NOTABUG
           Doc Type|---                         |If docs needed, set a value
        Last Closed|                            |2020-09-19 13:36:20



--- Comment #2 from Juan Orti Alcaine <j.orti.alcaine(a)gmail.com&gt; ---
(In reply to dan from comment #0)
>  $inet_socket_port = [10024,10026];  # listen on multiple TCP ports
This is commented out and is an example. The default port is 10024 which is
allowed in the SELinux policy.

It's expected that you have to tag any other port with the correct SELinux
label.


-- 
You are receiving this mail because:
You are on the CC list for the bug.