[CentOS] Odd SELinux messages during+after 5.3 upgrade (system_mail_t and postfix_postdrop_t access rpm_var_lib_t)

2009/4/14 Dan Mensom <mensomman at yahoo.com>

>
> Hey guys,
>
> I've been getting some strange selinux messages after the 5.3 upgrade.
> It appears as though my mail system (postfix) is constantly trying to
> access the rpm database? Here's the audit messages (I tend to look at
> my selinux messages using audit2allow < /var/log/audit.log as I find
> it easier to read quickly):
>
> Does anyone know what these accesses are? And why they might be still
> continously triggering for the mail system, where as all the other
> packages have stopped causing them?
>
> Also, on a related note, is it normally best practices to 'setenforce 0'
> during a 5.x upgrade? Is it possible I've damaged something by leaving
> selinux enabled? Other than the spamassassin issue, the machine seems
> to be running ok..
>

I've seen the same with a bit of php sending mail through a cronjob... I've
so far been unable to reproduce it though... The php in question isn't
supposed to touch the rpmdb even it was maintaining open file handles when
launching sendmail...

d
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20090414/27e66a52/attachment-0001.html>