FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora SELinux Support

 
 
LinkBack Thread Tools
 
Old 05-17-2012, 11:32 PM
Chuck Anderson
 
Default EL6: procmail vs. /home/*/bin/shellscript.sh

I'm using EL 6.2 with sendmail & procmail. I'm having trouble with
calling custom scripts in my home directory from .procmailrc such as
this recipe:

################################################## ####
#
# BACKUP INCOMING MAIL
#
# Stores the last 16 messages in a backup folder.
# "Just in Case"
#
# Create a folder in your $MAILDIR called "backup"
# BEFORE you execute this procmail recipe.
#
:0 c
backup

:0 ic
| /home/cra/bin/procmail-prune-backup-msg

The script is labeled with home_bin_t:

-rwxr-xr-x. cra cra system_ubject_r:home_bin_t:s0 /home/cra/bin/procmail-prune-backup-msg

which is a Bourne Shell script similar to this:

#!/bin/sh
cd /home/cra/mail/backup
/bin/ls -t | /bin/grep ^msg. | /bin/sed -e 1,256d | /usr/bin/xargs -n 256 /bin/rm -f

In my procmail log I get:

/bin/sh: /home/cra/bin/procmail-prune-backup-msg: Permission denied

It works if I "setenforce 0".

With Enforcing, here is the AVC I get (after enabling dontaudit rules
with semodule -DB):

# ausearch -i -m AVC
type=SYSCALL msg=audit(05/17/2012 19:17:15.773:273) : arch=x86_64 syscall=open success=no exit=-13(Permission denied) a0=1c8d460 a1=0 a2=1c8d487 a3=28 items=0 ppid=5252 pid=5257 auid=root uid=cra gid=cra euid=cra suid=cra fsuid=cra egid=cra sgid=cra fsgid=cra tty=(none) ses=1 comm=sh exe=/bin/bash subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(05/17/2012 19:17:15.773:273) : avc: denied { search } for pid=5257 comm=sh name=bin dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir

I did a bunch of research on this and found this old changelog entry
and the discussions/bugzillas leading up to it:

#rpm -q selinux-policy
selinux-policy-3.7.19-126.el6_2.10.noarch

#rpm -q --changelog selinux-policy
...
* Tue May 25 2010 Dan Walsh <dwalsh@redhat.com> 3.7.19-22
- Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
- Fix /var/run/abrtd.lock label

Was there a recent regression that broke this functionality or did it
not really make it into Enterprise Linux despite this changelog? Any
ideas on how to fix this cleanly without having to disable Enforcing
mode?

Thanks.
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux
 
Old 05-18-2012, 02:34 PM
Daniel J Walsh
 
Default EL6: procmail vs. /home/*/bin/shellscript.sh

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/17/2012 07:32 PM, Chuck Anderson wrote:
> I'm using EL 6.2 with sendmail & procmail. I'm having trouble with calling
> custom scripts in my home directory from .procmailrc such as this recipe:
>
> ################################################## #### # # BACKUP INCOMING
> MAIL # # Stores the last 16 messages in a backup folder. # "Just in Case"
> # # Create a folder in your $MAILDIR called "backup" # BEFORE you execute
> this procmail recipe. # :0 c backup
>
> :0 ic | /home/cra/bin/procmail-prune-backup-msg
>
> The script is labeled with home_bin_t:
>
> -rwxr-xr-x. cra cra system_ubject_r:home_bin_t:s0
> /home/cra/bin/procmail-prune-backup-msg
>
> which is a Bourne Shell script similar to this:
>
> #!/bin/sh cd /home/cra/mail/backup /bin/ls -t | /bin/grep ^msg. | /bin/sed
> -e 1,256d | /usr/bin/xargs -n 256 /bin/rm -f
>
> In my procmail log I get:
>
> /bin/sh: /home/cra/bin/procmail-prune-backup-msg: Permission denied
>
> It works if I "setenforce 0".
>
> With Enforcing, here is the AVC I get (after enabling dontaudit rules with
> semodule -DB):
>
> # ausearch -i -m AVC type=SYSCALL msg=audit(05/17/2012 19:17:15.773:273) :
> arch=x86_64 syscall=open success=no exit=-13(Permission denied) a0=1c8d460
> a1=0 a2=1c8d487 a3=28 items=0 ppid=5252 pid=5257 auid=root uid=cra gid=cra
> euid=cra suid=cra fsuid=cra egid=cra sgid=cra fsgid=cra tty=(none) ses=1
> comm=sh exe=/bin/bash subj=unconfined_u:system_rrocmail_t:s0 key=(null)
> type=AVC msg=audit(05/17/2012 19:17:15.773:273) : avc: denied { search }
> for pid=5257 comm=sh name=bin dev=dm-10 ino=2760827
> scontext=unconfined_u:system_rrocmail_t:s0
> tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
>
> I did a bunch of research on this and found this old changelog entry and
> the discussions/bugzillas leading up to it:
>
> #rpm -q selinux-policy selinux-policy-3.7.19-126.el6_2.10.noarch
>
> #rpm -q --changelog selinux-policy ... * Tue May 25 2010 Dan Walsh
> <dwalsh@redhat.com> 3.7.19-22 - Allow procmail to execute scripts in the
> users home dir that are labeled home_bin_t - Fix /var/run/abrtd.lock label
>
> Was there a recent regression that broke this functionality or did it not
> really make it into Enterprise Linux despite this changelog? Any ideas on
> how to fix this cleanly without having to disable Enforcing mode?
>
> Thanks. -- selinux mailing list selinux@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux

Hey chuck, could you check to see if this is fixed by installing the 6.3
policy. Preview currently available at:

people.redhat.com/dwalsh/SELinux/RHEL6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+2XgUACgkQrlYvE4MpobNT9gCfYdkEQ/m0JDFQXouQdsX104w9
+qMAoMJuW4F19wHZvbPYmKyBlEPuB17Y
=1f3c
-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux
 
Old 05-18-2012, 07:03 PM
Chuck Anderson
 
Default EL6: procmail vs. /home/*/bin/shellscript.sh

On Fri, May 18, 2012 at 10:34:45AM -0400, Daniel J Walsh wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/17/2012 07:32 PM, Chuck Anderson wrote:
> > I'm using EL 6.2 with sendmail & procmail. I'm having trouble with calling
> > custom scripts in my home directory from .procmailrc such as this recipe:
> >
> > ################################################## #### # # BACKUP INCOMING
> > MAIL # # Stores the last 16 messages in a backup folder. # "Just in Case"
> > # # Create a folder in your $MAILDIR called "backup" # BEFORE you execute
> > this procmail recipe. # :0 c backup
> >
> > :0 ic | /home/cra/bin/procmail-prune-backup-msg
> >
> > The script is labeled with home_bin_t:
> >
> > -rwxr-xr-x. cra cra system_ubject_r:home_bin_t:s0
> > /home/cra/bin/procmail-prune-backup-msg
> >
> > which is a Bourne Shell script similar to this:
> >
> > #!/bin/sh cd /home/cra/mail/backup /bin/ls -t | /bin/grep ^msg. | /bin/sed
> > -e 1,256d | /usr/bin/xargs -n 256 /bin/rm -f
> >
> > In my procmail log I get:
> >
> > /bin/sh: /home/cra/bin/procmail-prune-backup-msg: Permission denied
> >
> > It works if I "setenforce 0".
> >
> > With Enforcing, here is the AVC I get (after enabling dontaudit rules with
> > semodule -DB):
> >
> > # ausearch -i -m AVC type=SYSCALL msg=audit(05/17/2012 19:17:15.773:273) :
> > arch=x86_64 syscall=open success=no exit=-13(Permission denied) a0=1c8d460
> > a1=0 a2=1c8d487 a3=28 items=0 ppid=5252 pid=5257 auid=root uid=cra gid=cra
> > euid=cra suid=cra fsuid=cra egid=cra sgid=cra fsgid=cra tty=(none) ses=1
> > comm=sh exe=/bin/bash subj=unconfined_u:system_rrocmail_t:s0 key=(null)
> > type=AVC msg=audit(05/17/2012 19:17:15.773:273) : avc: denied { search }
> > for pid=5257 comm=sh name=bin dev=dm-10 ino=2760827
> > scontext=unconfined_u:system_rrocmail_t:s0
> > tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
> >
> > I did a bunch of research on this and found this old changelog entry and
> > the discussions/bugzillas leading up to it:
> >
> > #rpm -q selinux-policy selinux-policy-3.7.19-126.el6_2.10.noarch
> >
> > #rpm -q --changelog selinux-policy ... * Tue May 25 2010 Dan Walsh
> > <dwalsh@redhat.com> 3.7.19-22 - Allow procmail to execute scripts in the
> > users home dir that are labeled home_bin_t - Fix /var/run/abrtd.lock label
> >
> > Was there a recent regression that broke this functionality or did it not
> > really make it into Enterprise Linux despite this changelog? Any ideas on
> > how to fix this cleanly without having to disable Enforcing mode?
> >
> > Thanks. -- selinux mailing list selinux@lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/selinux
>
> Hey chuck, could you check to see if this is fixed by installing the 6.3
> policy. Preview currently available at:
>
> people.redhat.com/dwalsh/SELinux/RHEL6

No go:

>rpm -qa selinux-policy*
selinux-policy-targeted-3.7.19-153.el6.noarch
selinux-policy-3.7.19-153.el6.noarch

>grep AVC /var/log/audit/audit.log | grep procmail | audit2allow -R

require {
type sendmail_t;
type spamc_t;
type home_bin_t;
type procmail_t;
class process { siginh noatsecure rlimitinh };
class dir search;
}

#============= procmail_t ==============
allow procmail_t home_bin_t:dir search;
allow procmail_t spamc_trocess { siginh rlimitinh noatsecure };

#============= sendmail_t ==============
allow sendmail_t procmail_trocess { siginh rlimitinh noatsecure };

I've attached the AVC and SYSCALL messages from audit.log from when I
upgraded to 3.7.19-153. I believe the "semodule -DB" I did yesterday
should still be in effect, so this includes things that are normally
dontaudited.
type=AVC msg=audit(1337366173.791:7373): avc: denied { read } for pid=23438 comm="load_policy" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=unconfined_ubject_r:rpm_tmp_t:s0 tclass=file
type=AVC msg=audit(1337366173.791:7373): avc: denied { read } for pid=23438 comm="load_policy" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=unconfined_ubject_r:rpm_tmp_t:s0 tclass=file
type=SYSCALL msg=audit(1337366173.791:7373): arch=c000003e syscall=59 success=yes exit=0 a0=1d44ed0 a1=1d4b2a0 a2=1d43250 a3=7fff9dc32680 items=0 ppid=23430 pid=23438 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
type=SYSCALL msg=audit(1337366173.797:7374): arch=c000003e syscall=1 success=yes exit=4195581 a0=4 a1=7f1081beb000 a2=4004fd a3=7fff636ea180 items=0 ppid=23430 pid=23438 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1337366175.729:7375): avc: denied { read } for pid=23475 comm="restorecon" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_ubject_r:rpm_tmp_t:s0 tclass=file
type=AVC msg=audit(1337366175.729:7375): avc: denied { read } for pid=23475 comm="restorecon" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_ubject_r:rpm_tmp_t:s0 tclass=file
type=SYSCALL msg=audit(1337366175.729:7375): arch=c000003e syscall=59 success=yes exit=0 a0=1f85c90 a1=1f90c40 a2=1f89050 a3=7fff4c6e98b0 items=0 ppid=23440 pid=23475 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="restorecon" exe="/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1337366176.793:7376): avc: denied { read } for pid=23869 comm="restorecon" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_ubject_r:rpm_tmp_t:s0 tclass=file
type=SYSCALL msg=audit(1337366176.793:7376): arch=c000003e syscall=59 success=yes exit=0 a0=1d4a580 a1=1d43510 a2=1d43250 a3=7fff9dc32b80 items=0 ppid=23427 pid=23869 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="restorecon" exe="/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1337366198.250:7377): avc: denied { rlimitinh } for pid=23877 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366198.250:7377): avc: denied { siginh } for pid=23877 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366198.250:7377): avc: denied { noatsecure } for pid=23877 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366198.250:7377): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23876 pid=23877 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366198.389:7378): avc: denied { search } for pid=23879 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366198.389:7378): arch=c000003e syscall=59 success=no exit=-13 a0=7fff8af6a5ac a1=a6a5d0 a2=a6cd70 a3=7fff8af6a3e0 items=0 ppid=23878 pid=23879 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366198.405:7379): avc: denied { search } for pid=23881 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366198.405:7379): arch=c000003e syscall=59 success=no exit=-13 a0=7fff8af6a5ac a1=a6d720 a2=a6cd70 a3=7fff8af6a3e0 items=0 ppid=23880 pid=23881 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366198.657:7380): avc: denied { search } for pid=23882 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366198.657:7380): arch=c000003e syscall=59 success=no exit=-13 a0=a6f1e0 a1=a6a5b0 a2=a6ced0 a3=7fff8af6a4b0 items=0 ppid=23877 pid=23882 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366198.657:7381): avc: denied { search } for pid=23883 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366198.657:7381): arch=c000003e syscall=59 success=no exit=-13 a0=7fff8af6a66c a1=a6cd10 a2=a6ced0 a3=7fff8af6a4b0 items=0 ppid=23877 pid=23883 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366198.659:7382): avc: denied { search } for pid=23882 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366198.659:7382): arch=c000003e syscall=2 success=no exit=-13 a0=2334460 a1=0 a2=2334487 a3=28 items=0 ppid=23877 pid=23882 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366198.661:7383): avc: denied { rlimitinh } for pid=23885 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366198.661:7383): avc: denied { siginh } for pid=23885 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366198.661:7383): avc: denied { noatsecure } for pid=23885 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366198.661:7383): arch=c000003e syscall=59 success=yes exit=0 a0=a6f1e0 a1=a6c990 a2=a6d090 a3=7fff8af6a490 items=0 ppid=23884 pid=23885 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366198.864:7384): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366198.864:7384): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366207.255:7391): avc: denied { rlimitinh } for pid=23891 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1337366207.255:7391): avc: denied { siginh } for pid=23891 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1337366207.255:7391): avc: denied { noatsecure } for pid=23891 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 tclass=process
type=SYSCALL msg=audit(1337366207.255:7391): arch=c000003e syscall=59 success=yes exit=0 a0=7fae70f91c98 a1=7fff7b8f4d00 a2=7fae71194350 a3=a items=0 ppid=23889 pid=23891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1337366207.551:7405): avc: denied { siginh } for pid=23894 comm="sh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1337366207.551:7405): avc: denied { noatsecure } for pid=23894 comm="sh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
type=SYSCALL msg=audit(1337366207.551:7405): arch=c000003e syscall=59 success=yes exit=0 a0=7fae72c08463 a1=7fff7b8f26b0 a2=7fae75c7b560 a3=7fae72441240 items=0 ppid=23893 pid=23894 auid=10002 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=pts2 ses=32 comm="sh" exe="/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1337366207.694:7406): avc: denied { siginh } for pid=23893 comm="tcsh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
type=AVC msg=audit(1337366207.694:7406): avc: denied { noatsecure } for pid=23893 comm="tcsh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
type=SYSCALL msg=audit(1337366207.694:7406): arch=c000003e syscall=59 success=yes exit=0 a0=7fae75c72070 a1=7fff7b8f48e0 a2=7fae75c7b560 a3=0 items=0 ppid=23892 pid=23893 auid=10002 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=pts2 ses=32 comm="tcsh" exe="/bin/tcsh" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
type=AVC msg=audit(1337366235.896:7407): avc: denied { rlimitinh } for pid=23912 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366235.896:7407): avc: denied { siginh } for pid=23912 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366235.896:7407): avc: denied { noatsecure } for pid=23912 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366235.896:7407): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23911 pid=23912 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366235.901:7408): avc: denied { search } for pid=23914 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366235.901:7408): arch=c000003e syscall=59 success=no exit=-13 a0=7fff30840bac a1=1a7c5d0 a2=1a80090 a3=7fff308409e0 items=0 ppid=23913 pid=23914 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366235.904:7409): avc: denied { search } for pid=23916 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366235.904:7409): arch=c000003e syscall=59 success=no exit=-13 a0=7fff30840bac a1=1a7f5e0 a2=1a80090 a3=7fff308409e0 items=0 ppid=23915 pid=23916 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366236.154:7410): avc: denied { search } for pid=23917 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366236.154:7410): arch=c000003e syscall=59 success=no exit=-13 a0=1a80130 a1=1a7c5b0 a2=1a7d320 a3=7fff30840ab0 items=0 ppid=23912 pid=23917 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366236.154:7411): avc: denied { search } for pid=23918 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366236.154:7411): arch=c000003e syscall=59 success=no exit=-13 a0=7fff30840c6c a1=1a7f2d0 a2=1a7d320 a3=7fff30840ab0 items=0 ppid=23912 pid=23918 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366236.156:7412): avc: denied { search } for pid=23917 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366236.156:7412): arch=c000003e syscall=2 success=no exit=-13 a0=1d29460 a1=0 a2=1d29487 a3=28 items=0 ppid=23912 pid=23917 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366236.159:7413): avc: denied { rlimitinh } for pid=23920 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366236.159:7413): avc: denied { siginh } for pid=23920 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366236.159:7413): avc: denied { noatsecure } for pid=23920 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366236.159:7413): arch=c000003e syscall=59 success=yes exit=0 a0=1a80130 a1=1a7f680 a2=1a7d510 a3=7fff30840a90 items=0 ppid=23919 pid=23920 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366236.171:7414): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366236.171:7414): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366322.148:7415): avc: denied { rlimitinh } for pid=23930 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366322.148:7415): avc: denied { siginh } for pid=23930 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366322.148:7415): avc: denied { noatsecure } for pid=23930 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366322.148:7415): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23929 pid=23930 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366322.497:7416): avc: denied { search } for pid=23932 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366322.497:7416): arch=c000003e syscall=59 success=no exit=-13 a0=7fff105e21dc a1=21765d0 a2=2178da0 a3=7fff105e2010 items=0 ppid=23931 pid=23932 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366322.500:7417): avc: denied { search } for pid=23934 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366322.500:7417): arch=c000003e syscall=59 success=no exit=-13 a0=7fff105e21dc a1=2178930 a2=2178da0 a3=7fff105e2010 items=0 ppid=23933 pid=23934 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366322.798:7418): avc: denied { search } for pid=23935 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366322.798:7418): arch=c000003e syscall=59 success=no exit=-13 a0=217b770 a1=21765b0 a2=2178ec0 a3=7fff105e20e0 items=0 ppid=23930 pid=23935 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366322.798:7419): avc: denied { search } for pid=23936 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366322.798:7419): arch=c000003e syscall=59 success=no exit=-13 a0=7fff105e229c a1=2178d40 a2=2178ec0 a3=7fff105e20e0 items=0 ppid=23930 pid=23936 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366322.799:7420): avc: denied { search } for pid=23935 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366322.799:7420): arch=c000003e syscall=2 success=no exit=-13 a0=24dd460 a1=0 a2=24dd487 a3=28 items=0 ppid=23930 pid=23935 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366322.803:7421): avc: denied { rlimitinh } for pid=23938 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366322.803:7421): avc: denied { siginh } for pid=23938 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366322.803:7421): avc: denied { noatsecure } for pid=23938 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366322.803:7421): arch=c000003e syscall=59 success=yes exit=0 a0=217b770 a1=21789f0 a2=2179140 a3=7fff105e20c0 items=0 ppid=23937 pid=23938 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366322.813:7422): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366322.813:7422): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366370.165:7423): avc: denied { rlimitinh } for pid=23941 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366370.165:7423): avc: denied { siginh } for pid=23941 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366370.165:7423): avc: denied { noatsecure } for pid=23941 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366370.165:7423): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23940 pid=23941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366370.168:7424): avc: denied { search } for pid=23943 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366370.168:7424): arch=c000003e syscall=59 success=no exit=-13 a0=7fff5a8b3e3c a1=1a605d0 a2=1a62c60 a3=7fff5a8b3c70 items=0 ppid=23942 pid=23943 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366370.171:7425): avc: denied { search } for pid=23945 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366370.171:7425): arch=c000003e syscall=59 success=no exit=-13 a0=7fff5a8b3e3c a1=1a63600 a2=1a62c60 a3=7fff5a8b3c70 items=0 ppid=23944 pid=23945 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366370.458:7426): avc: denied { search } for pid=23946 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366370.458:7426): arch=c000003e syscall=59 success=no exit=-13 a0=1a656e0 a1=1a605b0 a2=1a62d80 a3=7fff5a8b3d40 items=0 ppid=23941 pid=23946 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366370.458:7427): avc: denied { search } for pid=23947 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366370.458:7427): arch=c000003e syscall=59 success=no exit=-13 a0=7fff5a8b3efc a1=1a62c00 a2=1a62d80 a3=7fff5a8b3d40 items=0 ppid=23941 pid=23947 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366370.459:7428): avc: denied { search } for pid=23946 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366370.459:7428): arch=c000003e syscall=2 success=no exit=-13 a0=1dbc460 a1=0 a2=1dbc487 a3=28 items=0 ppid=23941 pid=23946 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366370.462:7429): avc: denied { rlimitinh } for pid=23949 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366370.462:7429): avc: denied { siginh } for pid=23949 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366370.462:7429): avc: denied { noatsecure } for pid=23949 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366370.462:7429): arch=c000003e syscall=59 success=yes exit=0 a0=1a656e0 a1=1a636c0 a2=1a63000 a3=7fff5a8b3d20 items=0 ppid=23948 pid=23949 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366370.472:7430): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366370.472:7430): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366406.828:7431): avc: denied { rlimitinh } for pid=23952 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366406.828:7431): avc: denied { siginh } for pid=23952 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366406.828:7431): avc: denied { noatsecure } for pid=23952 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366406.828:7431): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23951 pid=23952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366406.831:7432): avc: denied { search } for pid=23954 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366406.831:7432): arch=c000003e syscall=59 success=no exit=-13 a0=7ffffeff3e4c a1=7ef5d0 a2=7f37a0 a3=7ffffeff3c80 items=0 ppid=23953 pid=23954 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366406.833:7433): avc: denied { search } for pid=23956 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366406.833:7433): arch=c000003e syscall=59 success=no exit=-13 a0=7ffffeff3e4c a1=7f2490 a2=7f37a0 a3=7ffffeff3c80 items=0 ppid=23955 pid=23956 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366407.121:7434): avc: denied { search } for pid=23957 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366407.121:7434): arch=c000003e syscall=59 success=no exit=-13 a0=7f3840 a1=7ef5b0 a2=7f0320 a3=7ffffeff3d50 items=0 ppid=23952 pid=23957 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366407.121:7435): avc: denied { search } for pid=23958 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366407.121:7435): arch=c000003e syscall=59 success=no exit=-13 a0=7ffffeff3f0c a1=7f3740 a2=7f0320 a3=7ffffeff3d50 items=0 ppid=23952 pid=23958 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366407.122:7436): avc: denied { search } for pid=23957 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366407.122:7436): arch=c000003e syscall=2 success=no exit=-13 a0=24cc460 a1=0 a2=24cc487 a3=28 items=0 ppid=23952 pid=23957 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366407.126:7437): avc: denied { rlimitinh } for pid=23960 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366407.126:7437): avc: denied { siginh } for pid=23960 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366407.126:7437): avc: denied { noatsecure } for pid=23960 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366407.126:7437): arch=c000003e syscall=59 success=yes exit=0 a0=7f3840 a1=7f26a0 a2=7f05a0 a3=7ffffeff3d30 items=0 ppid=23959 pid=23960 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366407.135:7438): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366407.135:7438): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366442.238:7439): avc: denied { rlimitinh } for pid=23963 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366442.238:7439): avc: denied { siginh } for pid=23963 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366442.238:7439): avc: denied { noatsecure } for pid=23963 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366442.238:7439): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23962 pid=23963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366442.470:7440): avc: denied { search } for pid=23965 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366442.470:7440): arch=c000003e syscall=59 success=no exit=-13 a0=7fff12f5f1fc a1=9f45d0 a2=9f6d70 a3=7fff12f5f030 items=0 ppid=23964 pid=23965 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366442.472:7441): avc: denied { search } for pid=23967 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366442.472:7441): arch=c000003e syscall=59 success=no exit=-13 a0=7fff12f5f1fc a1=9f7710 a2=9f6d70 a3=7fff12f5f030 items=0 ppid=23966 pid=23967 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366442.751:7442): avc: denied { search } for pid=23968 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366442.751:7442): arch=c000003e syscall=59 success=no exit=-13 a0=9f95b0 a1=9f45b0 a2=9f6ed0 a3=7fff12f5f100 items=0 ppid=23963 pid=23968 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366442.751:7443): avc: denied { search } for pid=23969 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366442.751:7443): arch=c000003e syscall=59 success=no exit=-13 a0=7fff12f5f2bc a1=9f6d10 a2=9f6ed0 a3=7fff12f5f100 items=0 ppid=23963 pid=23969 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366442.753:7444): avc: denied { search } for pid=23968 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366442.753:7444): arch=c000003e syscall=2 success=no exit=-13 a0=2569460 a1=0 a2=2569487 a3=28 items=0 ppid=23963 pid=23968 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366442.755:7445): avc: denied { rlimitinh } for pid=23971 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366442.755:7445): avc: denied { siginh } for pid=23971 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366442.755:7445): avc: denied { noatsecure } for pid=23971 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366442.755:7445): arch=c000003e syscall=59 success=yes exit=0 a0=9f95b0 a1=9f6990 a2=9f7090 a3=7fff12f5f0e0 items=0 ppid=23970 pid=23971 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366442.765:7446): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366442.765:7446): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366459.230:7447): avc: denied { rlimitinh } for pid=23974 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366459.230:7447): avc: denied { siginh } for pid=23974 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366459.230:7447): avc: denied { noatsecure } for pid=23974 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366459.230:7447): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23973 pid=23974 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.443:7448): avc: denied { search } for pid=23976 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.443:7448): arch=c000003e syscall=59 success=no exit=-13 a0=7fffac5639dc a1=aa35d0 a2=aa5c90 a3=7fffac563810 items=0 ppid=23975 pid=23976 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.445:7449): avc: denied { search } for pid=23978 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.445:7449): arch=c000003e syscall=59 success=no exit=-13 a0=7fffac5639dc a1=aa54b0 a2=aa5c90 a3=7fffac563810 items=0 ppid=23977 pid=23978 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.698:7450): avc: denied { search } for pid=23980 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.698:7450): arch=c000003e syscall=59 success=no exit=-13 a0=aab6b0 a1=aa35b0 a2=aa5db0 a3=7fffac5638e0 items=0 ppid=23974 pid=23980 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.699:7451): avc: denied { search } for pid=23981 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.699:7451): arch=c000003e syscall=59 success=no exit=-13 a0=7fffac563a9c a1=aa5c30 a2=aa5db0 a3=7fffac5638e0 items=0 ppid=23974 pid=23981 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.699:7452): avc: denied { search } for pid=23980 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.699:7452): arch=c000003e syscall=2 success=no exit=-13 a0=234f460 a1=0 a2=234f487 a3=28 items=0 ppid=23974 pid=23980 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.704:7453): avc: denied { rlimitinh } for pid=23983 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366459.704:7453): avc: denied { siginh } for pid=23983 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366459.704:7453): avc: denied { noatsecure } for pid=23983 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366459.704:7453): arch=c000003e syscall=59 success=yes exit=0 a0=aab6b0 a1=aa6710 a2=aa6030 a3=7fffac5638c0 items=0 ppid=23982 pid=23983 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366459.714:7454): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366459.714:7454): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366459.865:7455): avc: denied { rlimitinh } for pid=23985 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366459.865:7455): avc: denied { siginh } for pid=23985 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366459.865:7455): avc: denied { noatsecure } for pid=23985 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366459.865:7455): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23984 pid=23985 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.885:7456): avc: denied { search } for pid=23987 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.885:7456): arch=c000003e syscall=59 success=no exit=-13 a0=7fffdc5ec80c a1=1bb65d0 a2=1bb8cd0 a3=7fffdc5ec640 items=0 ppid=23986 pid=23987 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366459.889:7457): avc: denied { search } for pid=23989 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366459.889:7457): arch=c000003e syscall=59 success=no exit=-13 a0=7fffdc5ec80c a1=1bb9710 a2=1bb8cd0 a3=7fffdc5ec640 items=0 ppid=23988 pid=23989 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366460.707:7458): avc: denied { search } for pid=23990 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366460.707:7458): arch=c000003e syscall=59 success=no exit=-13 a0=1bbb290 a1=1bb65b0 a2=1bb8e40 a3=7fffdc5ec710 items=0 ppid=23985 pid=23990 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366460.709:7459): avc: denied { search } for pid=23990 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366460.709:7459): arch=c000003e syscall=2 success=no exit=-13 a0=b2e460 a1=0 a2=b2e487 a3=28 items=0 ppid=23985 pid=23990 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366460.709:7460): avc: denied { search } for pid=23991 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366460.709:7460): arch=c000003e syscall=59 success=no exit=-13 a0=7fffdc5ec8cc a1=1bb8c40 a2=1bb8e40 a3=7fffdc5ec710 items=0 ppid=23985 pid=23991 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366460.713:7461): avc: denied { rlimitinh } for pid=23993 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366460.713:7461): avc: denied { siginh } for pid=23993 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366460.713:7461): avc: denied { noatsecure } for pid=23993 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366460.713:7461): arch=c000003e syscall=59 success=yes exit=0 a0=1bbb290 a1=1bb8960 a2=1bb90c0 a3=7fffdc5ec6f0 items=0 ppid=23992 pid=23993 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366460.723:7462): avc: denied { read } for pid=22579 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366460.723:7462): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=22579 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366512.035:7463): avc: denied { rlimitinh } for pid=23999 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366512.035:7463): avc: denied { siginh } for pid=23999 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366512.035:7463): avc: denied { noatsecure } for pid=23999 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366512.035:7463): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23998 pid=23999 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366512.038:7464): avc: denied { search } for pid=24001 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366512.038:7464): arch=c000003e syscall=59 success=no exit=-13 a0=7fffba42c4ec a1=f275d0 a2=f29d60 a3=7fffba42c320 items=0 ppid=24000 pid=24001 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366512.040:7465): avc: denied { search } for pid=24003 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366512.040:7465): arch=c000003e syscall=59 success=no exit=-13 a0=7fffba42c4ec a1=f2a6e0 a2=f29d60 a3=7fffba42c320 items=0 ppid=24002 pid=24003 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366512.524:7466): avc: denied { search } for pid=24004 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366512.524:7466): arch=c000003e syscall=59 success=no exit=-13 a0=f2c170 a1=f275b0 a2=f29ec0 a3=7fffba42c3f0 items=0 ppid=23999 pid=24004 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366512.525:7467): avc: denied { search } for pid=24005 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366512.525:7467): arch=c000003e syscall=59 success=no exit=-13 a0=7fffba42c5ac a1=f29d00 a2=f29ec0 a3=7fffba42c3f0 items=0 ppid=23999 pid=24005 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366512.526:7468): avc: denied { search } for pid=24004 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366512.526:7468): arch=c000003e syscall=2 success=no exit=-13 a0=1d5e460 a1=0 a2=1d5e487 a3=28 items=0 ppid=23999 pid=24004 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366512.529:7469): avc: denied { rlimitinh } for pid=24007 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366512.529:7469): avc: denied { siginh } for pid=24007 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366512.529:7469): avc: denied { noatsecure } for pid=24007 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366512.529:7469): arch=c000003e syscall=59 success=yes exit=0 a0=f2c170 a1=f29960 a2=f2a080 a3=7fffba42c3d0 items=0 ppid=24006 pid=24007 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366512.539:7470): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366512.539:7470): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366535.630:7471): avc: denied { rlimitinh } for pid=24010 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366535.630:7471): avc: denied { siginh } for pid=24010 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366535.630:7471): avc: denied { noatsecure } for pid=24010 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366535.630:7471): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24009 pid=24010 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366535.633:7472): avc: denied { search } for pid=24012 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366535.633:7472): arch=c000003e syscall=59 success=no exit=-13 a0=7fffb2e7150c a1=12365d0 a2=123a090 a3=7fffb2e71340 items=0 ppid=24011 pid=24012 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366535.635:7473): avc: denied { search } for pid=24014 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366535.635:7473): arch=c000003e syscall=59 success=no exit=-13 a0=7fffb2e7150c a1=12395e0 a2=123a090 a3=7fffb2e71340 items=0 ppid=24013 pid=24014 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366535.942:7474): avc: denied { search } for pid=24015 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366535.942:7474): arch=c000003e syscall=59 success=no exit=-13 a0=123a130 a1=12365b0 a2=1237320 a3=7fffb2e71410 items=0 ppid=24010 pid=24015 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366535.942:7475): avc: denied { search } for pid=24016 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366535.942:7475): arch=c000003e syscall=59 success=no exit=-13 a0=7fffb2e715cc a1=12392d0 a2=1237320 a3=7fffb2e71410 items=0 ppid=24010 pid=24016 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366535.943:7476): avc: denied { search } for pid=24015 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366535.943:7476): arch=c000003e syscall=2 success=no exit=-13 a0=12d6460 a1=0 a2=12d6487 a3=28 items=0 ppid=24010 pid=24015 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366535.946:7477): avc: denied { rlimitinh } for pid=24018 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366535.946:7477): avc: denied { siginh } for pid=24018 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=AVC msg=audit(1337366535.946:7477): avc: denied { noatsecure } for pid=24018 comm="spamc" scontext=unconfined_u:system_rrocmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process
type=SYSCALL msg=audit(1337366535.946:7477): arch=c000003e syscall=59 success=yes exit=0 a0=123a130 a1=1239680 a2=1237510 a3=7fffb2e713f0 items=0 ppid=24017 pid=24018 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null)
type=AVC msg=audit(1337366535.956:7478): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_ubject_r:shadow_t:s0 tclass=file
type=SYSCALL msg=audit(1337366535.956:7478): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null)
type=AVC msg=audit(1337366778.367:7479): avc: denied { rlimitinh } for pid=24035 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366778.367:7479): avc: denied { siginh } for pid=24035 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=AVC msg=audit(1337366778.367:7479): avc: denied { noatsecure } for pid=24035 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_rrocmail_t:s0 tclass=process
type=SYSCALL msg=audit(1337366778.367:7479): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24034 pid=24035 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366778.679:7480): avc: denied { search } for pid=24037 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366778.679:7480): arch=c000003e syscall=59 success=no exit=-13 a0=7fff648b16fc a1=1fac5d0 a2=1faed90 a3=7fbe6b4dfdc0 items=0 ppid=24036 pid=24037 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366778.681:7481): avc: denied { search } for pid=24039 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366778.681:7481): arch=c000003e syscall=59 success=no exit=-13 a0=7fff648b16fc a1=1faf740 a2=1faed90 a3=7fbe6b4dfdc0 items=0 ppid=24038 pid=24039 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_rrocmail_t:s0 key=(null)
type=AVC msg=audit(1337366778.943:7482): avc: denied { search } for pid=24040 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_rrocmail_t:s0 tcontext=user_ubject_r:home_bin_t:s0 tclass=dir
type=SYSCALL msg=audit(1337366778.943:7482): arch=c000003e syscall=59 success=no exit=-13 a0=1f
 

Thread Tools




All times are GMT. The time now is 09:40 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org