Find the answer to your Linux question:
Results 1 to 2 of 2
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1

    Exclamation postfix and selinux [selinux updates broke postfix?]

    Hi all, all this is done by looking at forums/docs on the net;

    So my server has been running fine for a year or so, i use postfix and dovecot;
    I wanted to update some mailboxes so i added a user

    adduser -s /sbin/nologin sales; passwd info
    (later realising that there was in a config file aliases)

    sales:		postmaster
    so i changed that by commenting it out.

    #sales:		postmaster
    Futher reading showed I then needed to update this by using

    /etc/init.d/postfix restart
    but postfix wouldent shutdown to startup again;
    futher reading and log file viewing showed an avc: denied message so i turned of selinux
    setenforce 0
    /etc/init.d/postfix restart

    great, reading futher i did a "yum update" to install selinux updates
    Mar 10 05:34:54 Updated: selinux-policy-3.3.1-135.fc9.noarch
    Mar 10 05:35:17 Updated: selinux-policy-targeted-3.3.1-135.fc9.noarch
    but i still cant start or stop postfix with selinux turned on;

    ok so after the SELINUX update, now POSTFIX wont send mails if SELINUX is turned on !!

    I found this on bugzilla
    ^^ had to replace : and . with , cos i'm not allowed to post links yet

    "Bug 553492 - New selinux packages broke Postfix "

    "One of my mailservers running postfix has suddenly stopped sending mail"

    Same problem as me, postfix has stopped sending emails with selinux turned on after selinux updates!

    Can anyone help cos the bugzilla posts freak me out, i have no-idea about below

    Create a file called mypostfix.te with the following content.
    =================================cut =========================================
    policy_module(mypostfix, 1.0)
     type sendmail_t;
    allow postfix_postdrop_t sendmail_t:unix_stream_socket { getattr read write
    ioctl };
    # make -f /usr/share/selinux/devel/Makefile
    # semodule -i mypostfix.pp
    i have no-idea if this is a fix or not, its bugzilla posts has confuzzled me!

    Help a nub out please


  2. #2
    Hi all, I've been looking at this again, your input will be appreciated

    Anyone got any ideas yet? I want to get postfix sending emails without having to disable selinux :S
    I can start postfix and it sends emails with selinux off | SETENFORCE 0
    If i then SETENFORCE 1 without stopping postfix the service still runs but doesnt sendmail :S

    Mar 11 05:24:38 HOSTNAME postfix/cleanup[27957]: fatal: open lock file pid/unix.cleanup: cannot open file: Permission denied
    Mar 11 05:24:39 HOSTNAME postfix/master[27911]: warning: process /usr/libexec/postfix/cleanup pid 27957 exit status 1
    Mar 11 05:24:39 HOSTNAME postfix/master[27911]: warning: /usr/libexec/postfix/cleanup: bad command startup -- throttling
    ^^^ OK WHATS THIS?? Permission denied? - IF I CAN FIX THIS IT SHOULD WORK! ^^^

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts