postfix and selinux [selinux updates broke postfix?]

[rjcroasdale]

Hi all, all this is done by looking at forums/docs on the net;

So my server has been running fine for a year or so, i use postfix and dovecot;
I wanted to update some mailboxes so i added a user

adduser -s /sbin/nologin sales; passwd info

(later realising that there was in a config file aliases)

sales:		postmaster

so i changed that by commenting it out.

#sales:		postmaster

Futher reading showed I then needed to update this by using

newaliases

and

/etc/init.d/postfix restart

but postfix wouldent shutdown to startup again;
futher reading and log file viewing showed an avc: denied message so i turned of selinux

setenforce 0

and

/etc/init.d/postfix restart

worked,

great, reading futher i did a "yum update" to install selinux updates

Mar 10 05:34:54 Updated: selinux-policy-3.3.1-135.fc9.noarch
Mar 10 05:35:17 Updated: selinux-policy-targeted-3.3.1-135.fc9.noarch

but i still cant start or stop postfix with selinux turned on;



ok so after the SELINUX update, now POSTFIX wont send mails if SELINUX is turned on !!

I found this on bugzilla

https,//bugzilla.redhat,com/show_bug.cgi?id=553492

^^ had to replace : and . with , cos i'm not allowed to post links yet

"Bug 553492 - New selinux packages broke Postfix "

"One of my mailservers running postfix has suddenly stopped sending mail"

Same problem as me, postfix has stopped sending emails with selinux turned on after selinux updates!

Can anyone help cos the bugzilla posts freak me out, i have no-idea about below

Create a file called mypostfix.te with the following content.

=================================cut =========================================
policy_module(mypostfix, 1.0)

gen_require(`
 type sendmail_t;
')

allow postfix_postdrop_t sendmail_t:unix_stream_socket { getattr read write
ioctl };
=============================================================================

# make -f /usr/share/selinux/devel/Makefile
# semodule -i mypostfix.pp

i have no-idea if this is a fix or not, its bugzilla posts has confuzzled me!

Help a nub out please

Regards

[rjcroasdale]

Hi all, I've been looking at this again, your input will be appreciated

Anyone got any ideas yet? I want to get postfix sending emails without having to disable selinux :S
I can start postfix and it sends emails with selinux off | SETENFORCE 0
If i then SETENFORCE 1 without stopping postfix the service still runs but doesnt sendmail :S

Mar 11 05:24:38 HOSTNAME postfix/cleanup[27957]: fatal: open lock file pid/unix.cleanup: cannot open file: Permission denied
Mar 11 05:24:39 HOSTNAME postfix/master[27911]: warning: process /usr/libexec/postfix/cleanup pid 27957 exit status 1
Mar 11 05:24:39 HOSTNAME postfix/master[27911]: warning: /usr/libexec/postfix/cleanup: bad command startup -- throttling

^^^ OK WHATS THIS?? Permission denied? - IF I CAN FIX THIS IT SHOULD WORK! ^^^