Re: Allow apache to send mail?

[Robin Bowes]

Daniel J Walsh said the following on 07/12/2005 21:24:
>  Robin Bowes wrote:
>  
> > Hi,
> >
> > Can anyone tell me how to allow apache (httpd) to send mail, i.e. to use
> > the smtp port?
> >
> > I'm trying to enable notifications in Trac and am seeing this in the
> > audit log:
> >
> > type=AVC msg=audit(1133985478.317:38): avc:  denied  { name_connect }
> > for  pid=2175 comm="httpd" dest=25 scontext=system_u:system_r:httpd_t
> > tcontext=system_u:object_r:smtp_port_t tclass=tcp_socket
> > type=SYSCALL msg=audit(1133985478.317:38): arch=c000003e syscall=42
> > success=no exit=-13 a0=11 a1=2aaab21569f0 a2=10 a3=0 items=0 pid=2175
> > auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48
> > fsgid=48 comm="httpd" exe="/usr/sbin/httpd"
> > type=SOCKADDR msg=audit(1133985478.317:38):
> > saddr=020000195433A04E0000000000000000
> >
> > How do I modify my policy to allow this?
>  
>  Easiest way is
>  
>  setsebool -P httpd_can_network_connect=1 
Daniel,

Thanks.

I came up with the following:

allow httpd_t smtp_port_t:tcp_socket name_connect;

CAn this be added to the std policy? Or preferably added as a boolean, e.g.:

setsebool -P httpd_can_send_mail

R.