Re: [CentOS] OpenDKIM and SELinux

2014-05-13 Thread Daniel J Walsh
On 05/13/2014 09:56 AM, James B. Byrne wrote: > On Mon, May 12, 2014 14:05, Daniel J Walsh wrote: > >>> dac_read_search and dac_override are usually bad to add. They typically >>> mean the permission flags on the file in question is two tight for a >>> root process to read/use. >>> >>> Loosing up

Re: [CentOS] OpenDKIM and SELinux

2014-05-13 Thread James B. Byrne
On Mon, May 12, 2014 14:05, Daniel J Walsh wrote: >> dac_read_search and dac_override are usually bad to add. They typically >> mean the permission flags on the file in question is two tight for a >> root process to read/use. >> >> Loosing up the group/other permissions would probably allow a roo

Re: [CentOS] OpenDKIM and SELinux

2014-05-12 Thread Daniel J Walsh
On 05/12/2014 01:26 PM, Daniel J Walsh wrote: > On 05/12/2014 09:17 AM, James B. Byrne wrote: >> Following the most recent kernel updates I restarted our outgoing SMTP MTA >> which was recently reconfigured to DKIM sign messages using OpenDKIM. This >> morning I discovered that Postfix had stoppe

Re: [CentOS] OpenDKIM and SELinux

2014-05-12 Thread Daniel J Walsh
On 05/12/2014 09:17 AM, James B. Byrne wrote: > Following the most recent kernel updates I restarted our outgoing SMTP MTA > which was recently reconfigured to DKIM sign messages using OpenDKIM. This > morning I discovered that Postfix had stopped on that server. Whether it is > related to the P

[CentOS] OpenDKIM and SELinux

2014-05-12 Thread James B. Byrne
Following the most recent kernel updates I restarted our outgoing SMTP MTA which was recently reconfigured to DKIM sign messages using OpenDKIM. This morning I discovered that Postfix had stopped on that server. Whether it is related to the Postfix issue or not is yet to be determined but, in the

Re: [CentOS] Opendkim and SELinux

2014-05-06 Thread James B. Byrne
On Mon, May 5, 2014 11:48, Daniel J Walsh wrote: > > On 05/05/2014 11:22 AM, James B. Byrne wrote: >> CentOS-6.5 >> OpenDKIM-2.9.0 (epel) >> Postfix-2.6.6 (updates) >> >> I am trying to get opendkim working with our mailing lists. In the course >> of that endeavour I note that these messages are

Re: [CentOS] Opendkim and SELinux

2014-05-05 Thread Daniel J Walsh
On 05/05/2014 11:22 AM, James B. Byrne wrote: > CentOS-6.5 > OpenDKIM-2.9.0 (epel) > Postfix-2.6.6 (updates) > > I am trying to get opendkim working with our mailing lists. In the course of > that endeavour I note that these messages are appearing in our syslog: > > > May 4 20:50:02 inet08 setr

Re: [CentOS] Opendkim and SELinux

2014-05-05 Thread Nux!
On 05.05.2014 16:22, James B. Byrne wrote: > CentOS-6.5 > OpenDKIM-2.9.0 (epel) > Postfix-2.6.6 (updates) > > I am trying to get opendkim working with our mailing lists. In the > course of > that endeavour I note that these messages are appearing in our syslog: > > > May 4 20:50:02 inet08 se

[CentOS] Opendkim and SELinux

2014-05-05 Thread James B. Byrne
CentOS-6.5 OpenDKIM-2.9.0 (epel) Postfix-2.6.6 (updates) I am trying to get opendkim working with our mailing lists. In the course of that endeavour I note that these messages are appearing in our syslog: May 4 20:50:02 inet08 setroubleshoot: SELinux is preventing /usr/sbin/opendkim from usin