Re: Very odd: /proc/sys/net/ipv6/conf/all/disable_ipv6
Michael Bunk <[email protected]>
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <[email protected]> |
> setroubleshoot: SELinux is preventing /usr/sbin/sendmail.sendmail from > read access on the file disable_ipv6 > > ll -Z shows > -rw-r--r--. root root system_u:object_r:sysctl_net_t:s0 > /proc/sys/net/ipv6/conf/all/disable_ipv6 > > I find this peculiar. Anyone have a resolution, or is this a bug? Though the combination sounds alarming, this is probably only a file descriptor left open by whatever program called sendmail. That program should either close the file disable_ipv6 after use or set the CLOSE_ON_EXEC flag in the file descriptor. If you search for it, there are many such cases, even bug reports for CentOS-7: https://bugs.centos.org/view.php?id=12396 But no solution yet. Which program calls sendmail in your case? Best regards Michael PS: Don't feed the trolls. _______________________________________________ selinux mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected]