New to this list, and new to SELinux.

[Jean-David Beyer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/21/2013 11:31 AM, Daniel J Walsh wrote:
> On 01/19/2013 07:34 AM, Jean-David Beyer wrote:
>> On 01/18/2013 10:30 AM, Jean-David Beyer wrote:
>>> On 01/18/2013 09:24 AM, Miroslav Grepl wrote:
> 
>> [snip]
>>>> Hi, I believe we should collect all AVC msgs. Could you
>>>> execute
>>>> 
>>>> # semanage permissive -a system_mail_t
> 
>> Should I turn this off again? I.e., set it to 'enforcing'?
> Yes once you are done collecting the AVC's and are happy that it is
> working properly.
> 
> semanage permissive -d system_mail_t

OK. I did that.

These wemanage things take a long time. I have a 4-core 1.8 GHz Xeon
processor. They tend to hog an entire core for around (but less than)
a minute. What is it doing with all that time? The they have to hit a
database for each program and file in the system or something?

> We do not currently allow log files mailed off the system by the
> system mailer.  I guess we could add a boolean for this. but I do
> not believe we should allow this by default.

Was this in response to something I said? Because, if so, I forgot
what I may have said that prompted this.

In the future, I will be wanting to use shell scripts to send e-mails
from one computer to another on my l.a.n. Right now, I cannot do it
because I am running the default firewall that comes with RHEL 6 and
CentOS 5. I certainly can SSH files between the machines with no
trouble, since the default firewall allows that. And apparently so
does SELinux. I know I can e-mail stuff off my machine using
Thunderbird, and I do not suppose anything stops me from attaching a
log file, though I never tried that.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQ/ZZMAAoJEBZthAoMYQyLp/MIAL/r/OgoavErj5k1Dh9F7+Ij
BEu/wXHrcOs9Qt72FYuKu/kCb4sakvVay943Dq5AovZueRzvPW++uZZZumYdXLvY
522ZKNQ+xsaP8r4gVB4Yev0sE1Z++kLevWmIYcMgA+QM8pyC9BbzY8YAkzXW3LT1
/MoVqHPq1mv8/EAU5a1bjE+0rBywNbgaIBCWqrKKKz4LApMnljqNGIowmsUno1WG
IabE1LaE+s4tVa58areyp2ra8m51cwiKyHLSUtqccoRFcTYXboQMOm1qoZNOYjhg
ipdMvQQ2yKJ0HGRaOp1DsUE9rmhn4ELTQB900X4fWxFRlHwIxMMuxKg7ZBV/KDo=
=Djrf
-----END PGP SIGNATURE-----