On Tue, 25 Oct 2022 14:46:06 -0700 Mark Sapiro <mark@msapiro.net> wrote:
On 10/25/22 12:56, Onyeibo Oku wrote:
I must be missing necessary policy modules for mailman or I am missing relevant parts of the tutorial that deals with SELinux. Where do I go from here?
Create the necessary SELinux rules to allow
mailmanto access what it needs to.
Roger that.
There is progress beyond the previous report (after setting mailman_lock_t on '/opt/mailman/mm/var/locks'. Systemd fails again on '/opt/mailman/mm/var/logs/mailman.log'
I applied mailman_log_t SELinux policy to that folder. Unlike the previous AVC, that didn't fix it.
PermissionError: [Errno 13] Permission denied: '/opt/mailman/mm/var/logs/mailman.log'
AVC avc: denied { append } for pid=774 comm="mailman" name="mailman.log" dev="sda" ino=2070696 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:mailman_log_t:s0 tclass=file permissive=0
I don't know if anyone on this list can help you with that.
Note that if
mailmanis currently anormal useras opposed to asystem usermaking it a system user might help. Seeman usermod
Mailman user is a System User here.
Regards Onyeibo