Ladies and Gentlemen,

If I can get some help here. I am running Fedora 8
with sendmail 8.14.2. I have been getting the
following messages in audit.log. I am not really sure
what to make of them either. Sendmail runs. Errors
are listed below:

type=AVC msg=audit(1198878517.713:16): avc: denied {
signull } for pid=3153 comm="sendmail"
scontext=system_u:system_r:sendmail_t:s0
tcontext=system_u:system_r:sendmail_t:s0
tclass=process
type=SYSCALL msg=audit(1198878517.713:16):
arch=40000003 syscall=37 success=no exit=-13 a0=10fd
a1=0 a2=b7f3731c a3=84 items=0 ppid=1 pid=3153
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail"
exe="/usr/sbin/sendmail.sendmail"
subj=system_u:system_r:sendmail_t:s0 key=(null)

Sorry about the formatting, this webmail interface
does not support elaborate formatting.



__________________________________________________ __________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Harley Race wrote:
> Ladies and Gentlemen,
>
> If I can get some help here. I am running Fedora 8
> with sendmail 8.14.2. I have been getting the
> following messages in audit.log. I am not really sure
> what to make of them either. Sendmail runs. Errors
> are listed below:
>
> type=AVC msg=audit(1198878517.713:16): avc: denied {
> signull } for pid=3153 comm="sendmail"
> scontext=system_u:system_r:sendmail_t:s0
> tcontext=system_u:system_r:sendmail_t:s0
> tclass=process
> type=SYSCALL msg=audit(1198878517.713:16):
> arch=40000003 syscall=37 success=no exit=-13 a0=10fd
> a1=0 a2=b7f3731c a3=84 items=0 ppid=1 pid=3153
> auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
> egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail"
> exe="/usr/sbin/sendmail.sendmail"
> subj=system_u:system_r:sendmail_t:s0 key=(null)
>
> Sorry about the formatting, this webmail interface
> does not support elaborate formatting.
>
>
>
> __________________________________________________ __________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
I will add this to the next upgrade of selinux policy.

You can add it yourself by executing

# grep signull /var/log/audit/audit.log | audit2allow -M mysendmail
# semodule -i mysendmail.pp

Fixed in selinux-policy-3.0.8-73
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkd5VJkACgkQrlYvE4MpobP99gCgofL5GC3+Nq FKKp3xhBXmc/b7
WxQAoL4JPgFUuVwjVkC7gxjl+6cYQRqy
=dV96
-----END PGP SIGNATURE-----

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

--- Daniel J Walsh <dwalsh@redhat.com> wrote:

> > --
> > fedora-selinux-list mailing list
> > fedora-selinux-list@redhat.com
> >
>
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> I will add this to the next upgrade of selinux
> policy.
>
> You can add it yourself by executing
>
> # grep signull /var/log/audit/audit.log |
> audit2allow -M mysendmail
> # semodule -i mysendmail.pp
>
> Fixed in selinux-policy-3.0.8-73

Thank you very much for your swift response. I went
ahead and did as you instructed. No problems thus
far.



__________________________________________________ __________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list