CentOS - Jan 2012 - selinux context for mm-handler?

I've got a Mailman installation running on CentOS 4 that I'd like to 
migrate to a CentOS 6 box.

My big obstacle at present is getting Mailman's mm-handler Perl 
script to run as a Sendmail local mailer with SELinux enabled.

I've tried changing mm-handler's selinux context type a few times, but 
nothing has resulted in success:

   context              result
   -------------------  -----------------------------------------
   etc_mail_t           sendmail can't execute mm-handler
   mailman_mail_exec_t  mm-handler can't load perl modules
   bin_t                mm-handler can't read Mailman data
   sendmail_exec_t      mm-handler can't read Mailman data

I'm willing and able to whip up a local policy modification, but I 
thought I'd ask if there's a standard solution to this problem; my 
Google searches have so far proven ineffective at providing pointers 
to an answer.

-- 
Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/04/2012 05:37 PM, Paul Heinlein wrote:
> I've got a Mailman installation running on CentOS 4 that I'd like
> to migrate to a CentOS 6 box.
> 
> My big obstacle at present is getting Mailman's mm-handler Perl 
> script to run as a Sendmail local mailer with SELinux enabled.
> 
> I've tried changing mm-handler's selinux context type a few times,
> but nothing has resulted in success:
> 
> context              result -------------------
> ----------------------------------------- etc_mail_t
> sendmail can't execute mm-handler mailman_mail_exec_t  mm-handler
> can't load perl modules bin_t                mm-handler can't read
> Mailman data sendmail_exec_t      mm-handler can't read Mailman
> data
> 
> I'm willing and able to whip up a local policy modification, but I
>  thought I'd ask if there's a standard solution to this problem; my
>  Google searches have so far proven ineffective at providing
> pointers to an answer.
> 
Set it back to its default label and then tell me what AVC messages
you are seeing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8FrfMACgkQrlYvE4MpobP6FwCeMqGBjI9Qz36livyfx1ezRjLK
F/oAniZAQKY5u+T3qmRQmODnKVH4Q8fC
=rwIZ
-----END PGP SIGNATURE-----