Wietse Venema wrote:
The pickup daemon is supposed to be running all the time, and it
is supposed to react immediately. For debugging, see the "-v" option
in the master(5) manual page.
If you submit mail as a non-httpd user, then you will very likely
find that mail is delivered immediately.
Unfortunately, some Selinux configurations are known to prevent
the postdrop command from working properly when invoked by a web
daemon. Many people have found that turning off Selinux will
mysteriously solve problems.
Needless to say, I do not offer any warranties for damage done
by Selinux brain damage.
Wietse
The mystery surrounding SELinux is not so mysterious after all, as I
posted yesterday. In a (maybe
misguided) attempt to reduce the clutter in audit logs, some SELinux
rules are marked "DontAudit",
which results in denial of the necessary access without any visible
trace. There is a way to fix this while
one is effectively tracing the behaviour of a subsystem in order to work
out what rules need to be in
place to allow the necessary access. Depending on your distribution and
version, the way to do this varies;
I recommend this page for the details
<http://danwalsh.livejournal.com/11673.html>
Once I got through the cycle of permitting all the normal postdrop
actions (including allowing httpd to do
the things it needs to do in order to launch sendmail.postfix), things
worked quite smoothly.
