I just discovered that my spam filters are not being properly executed in CentOS 5.3 because when procmail attempts to invoke spamc. I have spamd running properly, and can invoke spamassassin and spamc from the bash prompt manually without any issues, however procmail fails with "permission denied" then bails. Watching the procmail.log I get the following:
procmail: Executing "/usr/bin/spamc" /bin/sh: /usr/bin/spamc: Permission denied procmail: Program failure (126) of "/usr/bin/spamc" procmail: Rescue of unfiltered data succeeded
Examining the SElinux audit logs, I discovered:
type=AVC msg=audit(1238765234.301:1752): avc: denied { execute } for pid=20177 comm="procmail" name="spamc" dev=hda1 ino=936505 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=file type=SYSCALL msg=audit(1238765234.301:1752): arch=40000003 syscall=11 success=no exit=-13 a0=95c0d90 a1=95c0020 a2=95c3cf0 a3=0 items=0 ppid=20176 pid=20177 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=12 fs gid=500 tty=(none) ses=4294967295 comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1238765234.325:1753): avc: denied { read } for pid=20177 comm="sh" name="spamc" dev=hda1 ino=936505 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:spamc_exec_t:s0 tclass=file type=SYSCALL msg=audit(1238765234.325:1753): arch=40000003 syscall=5 success=no exit=-13 a0=9a95718 a1=8000 a2=0 a3=8000 items=0 ppid=20176 pid=20177 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=50 0 tty=(none) ses=4294967295 comm="sh" exe="/bin/bash" subj=system_u:system_r:procmail_t:s0 key=(null)
Here is a similar web forum report from someone else:
Didn't find any reports in CentOS bugzilla about this yet, however I found one in Red Hat bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=486187
Shall I file a tracking bug in CentOS bugzilla, or just wait for the trickle down?