On Tue, 05 Feb 2008 08:23:43 +1100
David Timms <dtimms(a)iinet.net.au> wrote:
Daniel J Walsh wrote:
> David Timms wrote:
>> AFAICS, I haven't made any configs to sendmail, yet I've started
>> to get lots of AVC warnings in setroubleshoot, of three particular
>> types:
>>
>> 1:========
>> Summary
>> SELinux is preventing the /usr/sbin/sendmail.sendmail from using
>> potentially mislabeled files (<Unknown>).
>>
>> Detailed Description
>> SELinux has denied /usr/sbin/sendmail.sendmail access to
>> potentially mislabeled file(s) (<Unknown>). This means that
>> SELinux will not allow
> A postinstall script has ruined the labeling on your /etc/services
> file.
>
> # restorecon -v /etc/services
> will fix
# ls -lZ /etc/services
-rw-r--r-- root root
unconfined_u:object_r:rpm_script_tmp_t /etc/services Yes, you are
correct.
# restorecon -v /etc/services
restorecon reset /etc/services context
unconfined_u:object_r:rpm_script_tmp_t:s0->system_u:object_r:etc_t:s0
I guess experience rather than reading the troubleshoot message led
you to /etc/services ?
> If you any idea which rpm did this. I would like to know.
yum.logs--- I'l try to narrow it down, not sure how. I can't
remember now exactly what I was doing around the date that it started
occurring. ===
Might you have installed VMware? Mangling the context of /etc/services
to rpm_script_tmp_t is a long-standing bug in the VMware package
scripts.
Paul.