On Tue, December 9, 2014 17:27, Wietse Venema wrote: > James B. Byrne: >> If you want to fix the label. >> /var/spool/postfix/active/9934A60C7D default label should be >> postfix_spool_t. >> Then you can run restorecon. >> Do >> # /sbin/restorecon -v /var/spool/postfix/active/9934A60C7D > > That's no good. Postfix queue file names are time-dependent. > >> If you believe that smtp should be allowed lock access on the >> 9934A60C7D file by default. Then you should report this as a bug. > > smtp(8) like other Postfix delivery agents, should be allowed lock > access on ALL Postfix queue files (incoming, active, deferred). > > SeLinux hand-holding is not included with Postfix support. > > Wietse >
I was simply reproducing the sealert message detailing the evidence supporting my suspicions. Someone else may, one day, find this information enlightening when Googling for a similar problem (http://xkcd.com/979/). As for SELinux, I am well aware of the impracticality of many of sealert's suggested remedies. However, I am in contact with Dan Walsh who I believe to be somewhat influential in getting SELinux policies changed for RHEL/CentOS. He has been given the same information. I therefore have hopes of a positive resolution to the problem. Thanks again for the help. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:[email protected] Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
