search for: httpd_can_sendmail

...7176 Jun 9 2014 /etc/postfix/main.cf > > > How are you trying to send mail? Is it by chance through a web based > application? No just testing from the command line with mail. But I will need to be able to send mail from a PHP app. > If so, you may need to set the SELinux boolean httpd_can_sendmail. OK - I just did that - thanks! > > Otherwsie, check/restore default SELinux labelling for /etc/postfix/main.cf That looks correct: -rw-r--r--. root root system_u:object_r:postfix_etc_t:s0 /etc/postfix/main.cf

...y have >>> the neccessary information your need to debug your situation. >>> >>> Alexander >> >> I enabled both those options. tried to access again, same issue. > > Sorry, which 2 options did you enable? I turned on httpd_can_network_connect --> on httpd_can_sendmail --> on I restarted httpd. > >> Log file: >> [Thu Jun 18 17:08:31.160897 2020] [authz_core:error] [pid 10427:tid 140567258310400] [client 10.20.30.61:34096] AH01630: client denied >> by >> server configuration: /usr/share/squirrelmail/src/login.php > > So here y...

...accept squirrelmail connections: > > setsebool -P httpd_can_network_connect 1 > > (The -P makes it permanent across reboots. This command takes quite a while to run, so don't worry about the waiting) > > Then this to allow apache to connect to sendmail: > > setsebool -P httpd_can_sendmail 1 > > Also takes a long time to run. I am not using selinux on Centos 6, so those options are not set on C6. I have not tried either of those options above on C8. I wanted to check to see if those Directory options I listed in my OP were hosed, correct, etc. > > Note that in Squirrel...

When I try and send mail I see this in the maillog: Sep 6 11:59:48 postfix/sendmail[11059]: fatal: open /etc/postfix/main.cf: Permission denied But /etc/postfix/main.cf is world readable: $ ls -l /etc/postfix/main.cf -rw-r--r--. 1 root root 27176 Jun 9 2014 /etc/postfix/main.cf

Good evening, I have not able able to run the http://ip-addr/src/configtest.php script, nor access Squirrelmail. Looking for suggestions on what I might have missed. When I try either http://ip-... or https://ip-..., I get the following reply Forbidden You don't have permission to access /webmail/src/configtest.php on this server. I got squirrelmail installed in /usr/share/squirrelmail and

I am trying to recall back at least 2 years, and my notes are poor, and my searching appears to be worst... Seems I recall that last when I set up my apache server, the spammers were posting to it so it would send out the spam on port 25. There was some conf that I did to block this, but I did not document it, and I can't find any reference to this. I don't think my memory is that

...llow_java_execstack', 'allow_httpd_sys_script_anon_write', 'samba_share', 'filesystem_associate', 'fcron_crond', 'inetd_bind_ports', 'named_write_master_zones', 'qemu_file_image', 'catchall', 'allow_mplayer_execstack', 'httpd_can_sendmail', 'httpd_enable_homedirs', 'wine', 'xen_image', 'secure_mode_policyload', 'allow_execmod', 'disable_ipv6', 'httpd_can_network_connect_db', 'sys_module', 'bind_ports', 'samba_export_all_rw', 'use_samba_home_dirs&...

...>> >> _______________________________________________ >> CentOS mailing list >> CentOS at centos.org >> https://lists.centos.org/mailman/listinfo/centos > > First thing to enable httpd to send mail, you can turn on the send mail boolean. > > # setsebool -P httpd_can_sendmail 1 Oh I looked at these variables and somehow didn?t see it. > The ability to print you would need to add custom rules. > > # grep lpr /var/log/audit/audit.log | audit2allow -R -M myprint > > # semodule -i myprint.pp > > If you get another failure on lpt, you might have to run...

...t; stopped iptables and then checked: my first guess would be; setsebool -P httpd_can_network_connect on firewall-cmd --add-service=http --permanent if you're serving over https you'll also want; firewall-cmd --add-service=https --permanent if you intend on sending email; setsebool -P httpd_can_sendmail on

...ied > > But /etc/postfix/main.cf is world readable: > > $ ls -l /etc/postfix/main.cf > -rw-r--r--. 1 root root 27176 Jun 9 2014 /etc/postfix/main.cf How are you trying to send mail? Is it by chance through a web based application? If so, you may need to set the SELinux boolean httpd_can_sendmail. Otherwsie, check/restore default SELinux labelling for /etc/postfix/main.cf

...uirrelmail, do this to make selinux accept squirrelmail connections: setsebool -P httpd_can_network_connect 1 (The -P makes it permanent across reboots. This command takes quite a while to run, so don't worry about the waiting) Then this to allow apache to connect to sendmail: setsebool -P httpd_can_sendmail 1 Also takes a long time to run. Note that in SquirrelMail versions 1.5.0 and up, if you are accessing configtest.php from any place other than the machine where SquirrelMail is installed, you'll need to make sure $allow_remote_configtest is enabled in your configuration file to do so (or see...

Hi, Here's a list of all the booleans I tweaked on my server running CentOS 7: $ sudo cat /etc/selinux/targeted/active/booleans.local # This file is auto-generated by libsemanage # Do not edit directly. named_write_master_zones=0 httpd_can_sendmail=1 httpd_unified=1 ftpd_full_access=1 httpd_can_network_connect=1 spamd_enable_home_dirs=1 How can I "reset" (in a manner of speaking) these booleans to their default value post-install? Ideally, the booleans.local file should be empty, but since it's auto-generated, there's not...

Hello all... I maintain an amateurish email list for my wife's website on my CentOS 6 server. Once-a-month, she sends mail to "mylistaddr at mydomain.com" and the /etc/aliases file redirects that to my script: mylistaddr: "| /usr/bin/php-cgi /var/www/html/mydomain/email-cgi.php" The script, in turn, reads the recipient addresses out of a DB and composes and sends the

> Am 18.06.2020 um 22:37 schrieb Jay Hart: >>> On Thu, 18 Jun 2020 16:11:01 -0400 >>> Jay Hart wrote: >>> >>>> Any suggestions???? >>> selinux issue? >> I turned the firewall off and tried to access /webmail and the configtest file, Turning off the firewall resulted in same issue. > > Frank was hinting to SELinux preventing access. A

PS: Now I found this: type=PROCTITLE msg=audit(09/22/2017 12:08:29.911:1023) : proctitle=/usr/lib/sendmail -t -oi -oem -fwawi-genimp type=SYSCALL msg=audit(09/22/2017 12:08:29.911:1023) : arch=x86_64 syscall=setgroups success=no exit=EPERM(Operation not permitted) a0=0x1 a1=0x7ffc1df3b0d0 a2=0x0 a3=0x7f5d77c3a300 items=0 ppid=19417 pid=19418 auid=unset uid=lighttpd gid=lighttpd euid=root

I have Apache/2.4.6 installed in a minimal CentOS 7 VM. I am trying to access the default page when Apache is installed by accessing the CentOS IP as http://192.168.3.130 (is a host only interface) but I got "This webpage is not available: ERR_CONNECTION_TIMED_OUT" and I can't find why. I have stopped iptables and then checked: # service iptables status Redirecting to /bin/systemctl

...ts.centos.org/mailman/listinfo/centos > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos First thing to enable httpd to send mail, you can turn on the send mail boolean. # setsebool -P httpd_can_sendmail 1 The ability to print you would need to add custom rules. # grep lpr /var/log/audit/audit.log | audit2allow -R -M myprint # semodule -i myprint.pp If you get another failure on lpt, you might have to run these commands a couple of times.

...--> off allow_httpd_prewikka_script_anon_write --> off allow_httpd_squid_script_anon_write --> off allow_httpd_sys_script_anon_write --> off httpd_builtin_scripting --> on httpd_can_network_connect --> off httpd_can_network_connect_db --> off httpd_can_network_relay --> off httpd_can_sendmail --> on httpd_disable_trans --> off httpd_enable_cgi --> on httpd_enable_ftp_server --> off httpd_enable_homedirs --> on httpd_read_user_content --> off httpd_rotatelogs_disable_trans --> off httpd_ssi_exec --> off httpd_suexec_disable_trans --> off httpd_tty_comm --> o...