Re: selinux CGP and PHP context

Hello.

On 2016-09-26 21:59, Chris Vlad wrote:
> Hello Support,
> I am trying to use  php and CGP on the same box and the sendmail
> replacement from CGP is not sending when selinux is in enforce.
> I have the folowing:
> /etc/php.ini
>     sendmail_path = /opt/CommuniGate/sendmail –t –I –f
> “[email protected]” <mailto:“[email protected]”>
>
> ls –Z /opt/CommuniGate : sendmail context ->  sendmail_exec_t
>
>
> /var/log/audit/audit.log :
> avc denied {write} com=sendmail name=”Submitted” scontext=system_r
> system_mail_t   tcontext=unconfined_u : object_r : default_t  tclass=dir
> SYSCALL .... comm=”sendmail” exe=”/opt/CommuniGate/sendmail
> subj=system_u : system_r : system_mail_t : s0
>
>
> can someone please help with what context I need to set?  I would prefer
> to not have to create another context if I don’t have to.

You need to verify that /var/CommuniGate/Submitted is writable for the 
group "mail" and that /opt/CommuniGate/sendmail still owned by that 
group and has the SETGID bit on.


> Chris V.

-- 
Best regards,
Dmitry Akindinov

=======================================================================
When answering to letters sent to you by the tech.support staff, make
sure the original message you have received is included into your
reply.

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>