The mailing list for listmasters using Sympa

[Johan Loubser <address@concealed>]

I installed  6.1.11 via rpms from http://sympa-ja.org/download/rhel/6
I would like to know if there is a preset SELinux policy that would allow me to keep selinux in enforce mode.
I am new to selinux but would like to start using it.
Looking at the "sealert" log show many access limitation via SELinux.

SELinux is preventing /usr/sbin/exim from append access on the file /var/spool/sympa/tmp/28317.stderr.
SELinux is preventing /usr/bin/perl from getattr access on the sock_file /dev/log.
SELinux is preventing /usr/bin/perl from sendto access on the unix_dgram_socket /dev/log.
SELinux is preventing /usr/bin/perl from write access on the sock_file log.
SELinux is preventing /usr/bin/perl from write access on the directory /var/spool/sympa/msg.
SELinux is preventing /usr/bin/perl from write access on the directory /var/lib/sympa/list_data.
SELinux is preventing /usr/bin/perl from getattr access on the sock_file /dev/log.
SELinux is preventing /usr/bin/perl from sendto access on the unix_dgram_socket /dev/log.
SELinux is preventing /usr/bin/perl from write access on the sock_file log.
SELinux is preventing /usr/bin/perl from write access on the directory test2.
SELinux is preventing /usr/bin/perl from write access on the file config.lock.
SELinux is preventing /usr/bin/perl from ioctl access on the file /var/lib/sympa/list_data/test2/config.lock.
SELinux is preventing /usr/bin/perl from lock access on the file /var/lib/sympa/list_data/test2/config.lock.
SELinux is preventing /usr/bin/perl from getattr access on the file /var/lib/sympa/list_data/test2/config.
SELinux is preventing /usr/bin/perl from read access on the file config.lock.
SELinux is preventing /usr/sbin/aliaswrapper from using the setuid capability.
SELinux is preventing /usr/sbin/exim from using the setgid capability.
SELinux is preventing /usr/sbin/exim from using the dac_override capability.
SELinux is preventing /usr/bin/perl from read access on the directory /var/spool/sympa/subscribe.
SELinux is preventing /usr/bin/perl from read access on the directory /var/spool/sympa/moderation.

When i disable SELinux everything is working.
-- 
Johan Loubser

---

E-pos vrywaringsklousule

Hierdie e-pos mag vertroulike inligting bevat en mag regtens geprivilegeerd wees en is slegs bedoel vir die persoon aan wie dit geadresseer is. Indien u nie die bedoelde ontvanger is nie, word u hiermee in kennis gestel dat u hierdie dokument geensins mag gebruik, versprei of kopieer nie. Stel ook asseblief die sender onmiddellik per telefoon in kennis en vee die e-pos uit. Die Universiteit aanvaar nie aanspreeklikheid vir enige skade, verlies of uitgawe wat voortspruit uit hierdie e-pos en/of die oopmaak van enige lêers aangeheg by hierdie e-pos nie.

E-mail disclaimer

This e-mail may contain confidential information and may be legally privileged and is intended only for the person to whom it is addressed. If you are not the intended recipient, you are notified that you may not use, distribute or copy this document in any manner whatsoever. Kindly also notify the sender immediately by telephone, and delete the e-mail. The University does not accept liability for any damage, loss or expense arising from this e-mail and/or accessing any files attached to this e-mail.