Hello Nigel Kendrick,
On Friday, May 20, 2005, you wrote:
> Just to follow up on my previous post - this looks like an SELinux security
> issue as I spotted the following log messages (/var/log/messages):
> May 20 11:02:54 petdoctors kernel: audit(1116583374.225:0): avc: denied {
> create } for pid=4039 exe=/usr/sbin/sendmail.pos
> tfix scontext=user_u:system_r:httpd_sys_script_t
> tcontext=user_u:system_r:httpd_sys_script_t tclass=unix_dgram_socket
> May 20 11:02:54 petdoctors kernel: audit(1116583374.228:0): avc: denied {
> search } for pid=4039 exe=/usr/sbin/sendmail.pos
> tfix name=spool dev=md1 ino=2080804
> scontext=user_u:system_r:httpd_sys_script_t
> tcontext=system_u:object_r:var_spool_t tclass
> =dir
> May 20 11:02:54 petdoctors kernel: audit(1116583374.228:0): avc: denied {
> create } for pid=4039 exe=/usr/sbin/sendmail.pos
> tfix scontext=user_u:system_r:httpd_sys_script_t
> tcontext=user_u:system_r:httpd_sys_script_t tclass=unix_dgram_socket
> I have disabled SELinux and the problem has gone away - if anyone has a more
> specific fix I'd be grateful though.
Sure, your selinux configuration doesn't allow for the user apache to
execute the binary sendmail. The really easy way around this is to
tell SquirrelMail to use SMTP instead of sendmail (see config file).
--
Jonathan Angliss
<[EMAIL PROTECTED]>
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
--
squirrelmail-users mailing list
Posting Guidelines:
http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: [email protected]
List Archives:
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
