postfix and selinux [selinux updates broke postfix?]

rjcroasdale · #1 11th March 2010, 06:08 PM

Hi all, I've been looking at this again, your input will be appreciated

I did a "yum update" to install selinux updates

Code:

Mar 10 05:34:54 Updated: selinux-policy-3.3.1-135.fc9.noarch
Mar 10 05:35:17 Updated: selinux-policy-targeted-3.3.1-135.fc9.noarch

Now postfix wont sendmails with selinux enabled;

I want to get postfix sending emails without having to disable selinux :S
I can start postfix and it sends emails with selinux off | SETENFORCE 0
If i then SETENFORCE 1 without stopping postfix the service still runs but doesnt sendmail :S

Code:

Mar 11 05:24:38 HOSTNAME postfix/cleanup[27957]: fatal: open lock file pid/unix.cleanup: cannot open file: Permission denied
Mar 11 05:24:39 HOSTNAME postfix/master[27911]: warning: process /usr/libexec/postfix/cleanup pid 27957 exit status 1
Mar 11 05:24:39 HOSTNAME postfix/master[27911]: warning: /usr/libexec/postfix/cleanup: bad command startup -- throttling

^^^ OK WHATS THIS?? Permission denied? - IF I CAN FIX THIS IT SHOULD WORK! ^^^

BACKGROUND INFO

Hi all, all this is done by looking at forums/docs on the net;

So my server has been running fine for a year or so, i use postfix and dovecot;
I wanted to update some mailboxes so i added a user

Code:

adduser -s /sbin/nologin sales; passwd info

(later realising that there was in a config file aliases)

Code:

sales:		postmaster

so i changed that by commenting it out.

Code:

#sales:		postmaster

Futher reading showed I then needed to update this by using

Code:

newaliases

and

Code:

/etc/init.d/postfix restart

but postfix wouldent shutdown to startup again;
futher reading and log file viewing showed an avc: denied message so i turned of selinux

Code:

setenforce 0

and

Code:

/etc/init.d/postfix restart

worked,

great, reading futher i did a "yum update" to install selinux updates

Code:

Mar 10 05:34:54 Updated: selinux-policy-3.3.1-135.fc9.noarch
Mar 10 05:35:17 Updated: selinux-policy-targeted-3.3.1-135.fc9.noarch

but i still cant start or stop postfix with selinux turned on;

ok so after the SELINUX update, now POSTFIX wont send mails if SELINUX is turned on !!

I found this on bugzilla

Code:

https,//bugzilla.redhat,com/show_bug.cgi?id=553492

^^ had to replace : and . with , cos i'm not allowed to post links yet

"Bug 553492 - New selinux packages broke Postfix "

"One of my mailservers running postfix has suddenly stopped sending mail"

Same problem as me, postfix has stopped sending emails with selinux turned on after selinux updates!

Can anyone help cos the bugzilla posts freak me out, i have no-idea about below

Code:

Create a file called mypostfix.te with the following content.

=================================cut =========================================
policy_module(mypostfix, 1.0)

gen_require(`
 type sendmail_t;
')

allow postfix_postdrop_t sendmail_t:unix_stream_socket { getattr read write
ioctl };
=============================================================================

# make -f /usr/share/selinux/devel/Makefile
# semodule -i mypostfix.pp

i have no-idea if this is a fix or not, its bugzilla posts has confuzzled me!

Help a nub out please

Regards

#2 3rd April 2010, 08:29 AM

Hello,
There is a boolean for postfix in SELinux. Make sure that boolean has a check by it in the SELinux Administration tool.or is set.

Ky