spamassassin pre-compiled rules

Vadym Chepkov chepkov at yahoo.com
Sat Jul 11 12:06:10 UTC 2009


spamassassin rules got updated recently and I got this avc

type=AVC msg=audit(1247216252.200:31900): avc:  denied  { execute } for  pid=24001 comm="spamd" path="/var/lib/spamassassin/compiled/5.010/3.002005/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so" dev=dm-3 ino=124989 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:spamd_var_lib_t:s0 tclass=file

audit2allow suggests this
#============= spamd_t ==============
allow spamd_t spamd_var_lib_t:file execute;
seems reasonable, but why is it missing in standard policy?

Sincerely yours,
  Vadym Chepkov




More information about the selinux mailing list