James B. Byrne:
> If you want to fix the label.
> /var/spool/postfix/active/9934A60C7D default label should be postfix_spool_t.
> Then you can run restorecon.
> Do
> # /sbin/restorecon -v /var/spool/postfix/active/9934A60C7D
That's no good. Postfix queue file names are time-dependent.
> If you believe that smtp should be allowed lock access on the
> 9934A60C7D file by default. Then you should report this as a bug.
smtp(8) like other Postfix delivery agents, should be allowed lock
access on ALL Postfix queue files (incoming, active, deferred).
SeLinux hand-holding is not included with Postfix support.
Wietse