Re: [CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)

On Tue, 2009-04-14 at 12:06 +0800, D Tucny wrote:

2009/4/14 Dan Mensom mensomman@yahoo.com

    Hey guys,

    I've been getting some strange selinux messages after the 5.3
    upgrade.
    It appears as though my mail system (postfix) is constantly
    trying to
    access the rpm database? Here's the audit messages (I tend to
    look at
    my selinux messages using audit2allow < /var/log/audit.log as
    I find
    it easier to read quickly):

    Does anyone know what these accesses are? And why they might
    be still
    continously triggering for the mail system, where as all the
    other
    packages have stopped causing them?

    Also, on a related note, is it normally best practices to
    'setenforce 0'
    during a 5.x upgrade? Is it possible I've damaged something by
    leaving
    selinux enabled? Other than the spamassassin issue, the
    machine seems
    to be running ok..

I've seen the same with a bit of php sending mail through a cronjob... I've so far been unable to reproduce it though... The php in question isn't supposed to touch the rpmdb even it was maintaining open file handles when launching sendmail...

d

--- Is it possible yours stopped with the new PHP update that just come out?