similar to: CentOS-6.6 - Selinux and Postfix-2.11.1

Displaying 20 results from an estimated 20000 matches similar to: "CentOS-6.6 - Selinux and Postfix-2.11.1"

2014 Dec 09
1
CentOS-6.6 - Selinux and Postfix-2.11.1
Applied policy update. Now I see these occasionally. But by the time I try and see what the matter is the file is gone: /var/log/maillog . . . Dec 9 15:12:08 inet08 postfix/smtp[3670]: fatal: shared lock active/0A7EC60D8A: Resource temporarily unavailable . . . Dec 9 15:12:08 inet08 postfix/smtp[3758]: fatal: shared lock active/8DD5060F81: Resource temporarily unavailable . . . Dec 9 15:12:09
2015 Jan 19
0
CentOS-6.6 Fail2Ban and Postfix Selinux AVCs
On Mon, January 19, 2015 11:50, James B. Byrne wrote: > I am seeing these in the log of one of our off-site NX hosts running > CentOS-6.6. > > type=AVC msg=audit(1421683972.786:4372): avc: denied { create } for > pid=22788 comm="iptables" scontext=system_u:system_r:fail2ban_t:s0 > tcontext=system_u:system_r:fail2ban_t:s0 tclass=rawip_socket > Was caused by:
2014 Dec 04
3
Postfix avc (SELinux)
I am seeing these avc messages on a newly commissioned and up-to-date CentOs-6 virtual guest: ---- time->Thu Dec 4 12:14:58 2014 type=SYSCALL msg=audit(1417713298.610:60522): arch=c000003e syscall=2 success=no exit=-13 a0=7fd70e6de1e6 a1=0 a2=1b6 a3=0 items=0 ppid=2698 pid=4294 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2784 comm="trivial-rewrite"
2014 Dec 05
0
Postfix avc (SELinux)
On Fri, December 5, 2014 04:53, Daniel J Walsh wrote: > > On 12/04/2014 03:22 PM, James B. Byrne wrote: >> On Thu, December 4, 2014 12:29, James B. Byrne wrote: >>> Re: SELinux. Do I just build a local policy or is there some boolean >>> setting >>> needed to handle this? I could not find one if there is but. . . >>> >> Anyone see any problem
2012 Mar 28
0
[SOLVED] Re: Postfix problems with maximum messages size
On Wed, March 28, 2012 09:44, James B. Byrne wrote: > CentOS-6.2 > > I am confused. Yes, yes I am. I was looking at the wrong server. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario
2014 Dec 04
0
Postfix avc (SELinux)
On Thu, December 4, 2014 12:29, James B. Byrne wrote: > > Re: SELinux. Do I just build a local policy or is there some boolean setting > needed to handle this? I could not find one if there is but. . . > Anyone see any problem with generating a custom policy consisting of the following? grep avc /var/log/audit/audit.log | audit2allow #============= amavis_t ============== allow
2015 Jan 19
2
CentOS-6.6 Fail2Ban and Postfix Selinux AVCs
I am seeing these in the log of one of our off-site NX hosts running CentOS-6.6. type=AVC msg=audit(1421683972.786:4372): avc: denied { create } for pid=22788 comm="iptables" scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:system_r:fail2ban_t:s0 tclass=rawip_socket Was caused by: Missing type enforcement (TE) allow rule. You can use
2015 Apr 01
0
SELinux on CentOS-6.6
I wish to reuse ports 80 and 443 for a different service. When I try to assign the port context for that service I get this: /usr/sbin/semanage: Port tcp/80 already defined When I try to delete the assigned context then I get this: semanage port -d -t http_port_t -p tcp 80 /usr/sbin/semanage: Port tcp/80 is defined in policy, cannot be deleted httpd is not installed on this host. But looking
2015 Oct 27
0
CentOS-6.6 SELinux questions
we have remote server running as a guest instance on a kvm host. This server acts as a public MX service for our domains along with providing a backup for our Mailman mailing lists. It also has a slave named service. while tracking down a separate problem I discovered these avc anomalies and ran audit2allow to see what was required to eliminate them. All the software is either from CentOS or
2014 Dec 09
0
Postfix avc (SELinux)
On Mon, December 8, 2014 20:01, Daniel J Walsh wrote: > > rpm -q selinux-policy > > selinux-policy-3.7.19-260.el6 is the current policy in development. >> Thank you. >>>> #============= postfix_showq_t ============== >>>> allow postfix_showq_t tmp_t:dir read; >>> Any reason postfix would be listing the contents of /tmp or /var/tmp? >>>
2010 Jan 28
2
Starting a java applet from the desktop
CentOS-5.4 i86_64 I have a calculator applet on my desktop (superbcalc.jar). When I double click on it I get no response. If I right click and select open with java I get no response. If I open a terminal window and cd to Desktop and type java -jar superbcalc.jar then the applet opens. Does anyone have any idea why I am seeing this behaviour? There are no messages in the syslog file relating
2015 Mar 12
0
Java SSLv3 status on CentOS-6.6
On Wed, March 11, 2015 13:46, Grant McChesney wrote: > On Wed, Mar 11, 2015 at 10:03 AM, James B. Byrne > <byrnejb at harte-lyne.ca> > wrote: > >> Can anyone inform me as to whether or not Java on CentOS-6.6 still >> has SSLv3 enabled? And if it does then how is it disabled? >> >> > James: > > Check the java.security file for your JRE. I'm
2015 Feb 10
2
SELinux context for ssh host keys?
On Tue, February 10, 2015 04:18, Andrew Holway wrote: > On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg at wisc.edu> > wrote: > >> >> > On Feb 9, 2015, at 12:27 PM, Robert Nichols >> <rnicholsNOSPAM at comcast.net> >> wrote: >> > >> > On 02/09/2015 11:14 AM, James B. Byrne wrote: >> >> So, I decided to run
2009 Mar 31
1
[Fwd: Re: Another rpm question re %make]
On Tue, March 31, 2009 13:03, James B. Byrne wrote: > Found it. No etc/at.allow and no etc/at.deny means only root can > submit jobs. > Well, that was not it. I still get the same errors after adding my user id to /etc/at.allow. I tested whether job control was enabled by moving top into the background using ctrl-z and fg to return and that worked. Any suggestions as to what I am
2017 Oct 04
0
how to prevent files and directories from being deleted?
On Tue, October 3, 2017 13:12, hw wrote: > Alexander Dalloz <ad+lists at uni-x.org> writes: > >> Am 01.10.2017 um 17:21 schrieb hw: >>> Hi, >>> >>> how can I prevent files/directories like /var/run/mariadb from >>> being deleted on reboot? Lighttpd has the same problem. >>> >>> This breaks services and makes servers
2008 Oct 06
3
[Fwd: Re: Install CentOS-5.0 on HP-ComPaq DC7700 Dual Core]
---------------------------- Original Message ---------------------------- Subject: Re: [CentOS] Install CentOS-5.0 on HP-ComPaq DC7700 Dual Core From: "James B. Byrne" <byrnejb at harte-lyne.ca> Date: Mon, October 6, 2008 12:26 To: cenos at centos.org Cc: "John Newbigin" <jnewbigin at ict.swin.edu.au>
2020 Jun 03
1
samba-tool dns query
On Tue, June 2, 2020 11:13, Rowland penny wrote: > On 02/06/2020 16:03, James B. Byrne via samba wrote: >> Samba-4.11.8 on FreeBSd-12.1p5 >> >> How does one list all of the actual DNS records for Samba administered zones, >> forward and reverse? >> > Try: > > samba-tool dns query localhost brockley.harte-lyne.ca > brockley.harte-lyne.ca ALL -U
2014 Dec 15
0
[OT} Odd tmux behaviour on exit
CentOS-6.6 tmux-1.6 (epel) Twice now I have experienced the situation where upon exiting from a tmux initiated session on a remote host instead of returning to the originating session I see this in the session terminal display: <pre> ????????????????????????????????????????????????????????????????????????????????
2008 Jul 17
0
Re: Howto: Java Plugin for Firefox 3.0.1? {SOLVED]]
On Thu, July 17, 2008 15:05, James B. Byrne wrote: > I have no clue how to get java to work in FF3.0.1 at the moment. Any help > would be appreciated. > Ah. I now have to put this logical link in the.mozilla/plugins directory under each users home directory. At least it works. Sorry for the interruption. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne
2010 Sep 14
0
[Fwd: Re: Problem with SSHD update.]
On Tue, September 14, 2010 02:30, R P Herrold wrote: > On Mon, 13 Sep 2010, Karanbir Singh wrote: > >> So, I'm quite keen on finding out what is it that is causing >> the breakage for you > > Karanbir, in the middle of the thread from the archive: > > James B. Byrne at Mon Sep 13 12:59:25 EDT 2010 >> Did that via webmin's command interface and nothing