View Issue Details

IDProjectCategoryView StatusLast Update
0013619CentOS-7selinux-policypublic2018-09-19 17:06
Reporteracermtpr 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
PlatformOSOS Version7
Product Version 
Target VersionFixed in Version 
Summary0013619: SELinux is preventing sendmail from 'create' accesses on the file dead.letter.
DescriptionDescription of problem:
SELinux is preventing sendmail from 'create' accesses on the file dead.letter.

***** Plugin catchall (100. confidence) suggests **************************

If cree que de manera predeterminada, sendmail debería permitir acceso create sobre dead.letter file.
Then debería reportar esto como un error.
Puede generar un módulo de política local para permitir este acceso.
Do
allow this access for now by executing:
# ausearch -c 'sendmail' --raw | audit2allow -M my-sendmail
# semodule -i my-sendmail.pp

Additional Information:
Source Context system_u:system_r:sendmail_t:s0-s0:c0.c1023
Target Context system_u:object_r:mail_home_t:s0
Target Objects dead.letter [ file ]
Source sendmail
Source Path sendmail
Port <Unknown>
Host (removed)
Source RPM Packages
Target RPM Packages
Policy RPM selinux-policy-3.13.1-102.el7_3.16.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 3.10.0-514.26.2.el7.x86_64 #1 SMP
                              Tue Jul 4 15:04:05 UTC 2017 x86_64 x86_64
Alert Count 1
First Seen 2017-11-24 17:56:36 -05
Last Seen 2017-11-24 17:56:36 -05
Local ID 9bf80bc6-1055-4be1-b31f-404739ab7a7b

Raw Audit Messages
type=AVC msg=audit(1511564196.533:1297): avc: denied { create } for pid=16626 comm="sendmail" name="dead.letter" scontext=system_u:system_r:sendmail_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mail_home_t:s0 tclass=file


Hash: sendmail,sendmail_t,mail_home_t,file,create

Version-Release number of selected component:
selinux-policy-3.13.1-102.el7_3.16.noarch
Additional Informationreporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-514.26.2.el7.x86_64
reproducible: Not sure how to reproduce the problem
type: libreport
TagsNo tags attached.
abrt_hash4f1283f7e58225c5c244a59bf19b15be57ddba8f1378f8055d64ad7ecc2be8e1
URL

Activities

ahrboktrexon

ahrboktrexon

2018-05-11 08:54

reporter   ~0031757

Another user experienced a similar problem:

simple reboot after update

reporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-862.2.3.el7.x86_64
package: selinux-policy-3.13.1-192.el7_5.3.noarch
reason: SELinux is preventing /usr/sbin/ssmtp from 'create' accesses on the file dead.letter.
reproducible: Not sure how to reproduce the problem
type: libreport
hayrolr

hayrolr

2018-09-19 17:06

reporter   ~0032761

Another user experienced a similar problem:

I am using CentOS 7 and after the last updated happened couple days ago, I started to receive this alert and now I am getting this several times a day... 10 so far.
I have not done anything special nor installed anything new... just the last system update.

PS: After that update I also noted that I no longer can SUSPEND my machine... well, it can be suspended indeed but it can never be un-suspend because a RESTART is sent and the whole machine RESTART and I lost all opened porcess.

reporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-862.11.6.el7.x86_64
package: selinux-policy-3.13.1-192.el7_5.6.noarch
reason: SELinux is preventing sendmail from 'create' accesses on the file dead.letter.
reproducible: Not sure how to reproduce the problem
type: libreport

Issue History

Date Modified Username Field Change
2017-07-31 14:34 acermtpr New Issue
2018-05-11 08:54 ahrboktrexon Note Added: 0031757
2018-09-19 17:06 hayrolr Note Added: 0032761