Selinux issue

[Craig White]

On Sat, 2005-09-24 at 16:47 -0500, M. Lewis wrote:
> Craig White wrote:
> > On Sat, 2005-09-24 at 15:58 -0500, M. Lewis wrote:
> > 
> >>FC4
> >>selinux-policy-targeted-sources-1.27.1-2.1
> >>selinux-policy-strict-sources-1.25.4-10.1
> >>selinux-policy-targeted-1.27.1-2.1
> >>selinux-policy-strict-1.25.4-10.1
> >>
> >>type=AVC msg=audit(1127594745.645:394): avc:  denied  { name_bind } for 
> >>  pid=4155 comm="master" src=10025 
> >>scontext=root:system_r:postfix_master_t 
> >>tcontext=system_u:object_r:amavisd_send_port_t tclass=tcp_socket
> >>
> >>
> >>I've had to disable selinux in order to get postfix to run properly. 
> >>Once selinux is disabled, postfix starts and runs normally.  I have the 
> >>latest updates as of a few minutes ago. What do I need to do to fix this 
> >>issue?
> > 
> > ----
> > try (as root)
> > 
> > /sbin/fixfiles -R postfix restore
> > 
> > Craig
> > 
> > 
> 
> Thanks Craig, but no help. Postfix still refuses to run with selinux 
> enabled.
----
My version of Postfix (admittedly CentOS 4) doesn't have those files
which means that there is no context to restore because they weren't
part of the default definitions. Is this fedora version of Postfix? Did
you create those files? If so, you would have to set the contexts
yourself...

This is what I use as my bible for SELinux...

http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-
guide/

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.