need updated policy for postfix and /etc/aliases.db

[Daniel J Walsh]

Jeff MacDonald wrote:
> Greetings!
>
> I have the following in audit.log:
>
> type=AVC msg=audit(1129476522.717:3618): avc:  denied  { lock } for
> pid=20074 comm="smtpd" name="aliases.db" dev=dm-0 ino=3015628
> scontext=root:system_r:postfix_smtpd_t tcontext=root:object_r:etc_t
> tclass=file
> type=SYSCALL msg=audit(1129476522.717:3618): arch=40000003 syscall=143
> success=yes exit=0 a0=c a1=1 a2=809a4cc a3=1 items=0 pid=20074
> auid=4294967295 uid=89 gid=89 euid=89 suid=89 fsuid=89 egid=89 sgid=89
> fsgid=89 comm="smtpd" exe="/usr/libexec/postfix/smtpd"
> type=AVC_PATH msg=audit(1129476522.717:3618):  path="/etc/aliases.db"
>
> Looks like there needs to be a policy update.
>
>   
restorecon /etc/aliases.db

The file has the wrong security context on it.

Any idea how this file was created? 
> Regards,
> J
>   
> ------------------------------------------------------------------------
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list


--