amavisd SElinux problem

Issues related to applications and software problems and general support
Post Reply
Blisk
Posts: 316
Joined: 2011/07/04 14:49:51
Contact:

amavisd SElinux problem

Post by Blisk » 2022/05/01 16:36:09

When I enable SElinux I can not start amvaisd I always get the same error until I disable SElinux with setenforce 0
I try to add SElinux rules with ausearch -m avc -ts today | audit2allow -M myfix1
But doesn't work. What can I do to enable SElinux and make it amavisd to start?

May 1 18:30:35 akvarij amavis[127813]: perl=5.026003, user=, EUID: 971 (971); group=, EGID: 969 969 (969 969)
May 1 18:30:35 akvarij amavis[127816]: (!)Net::Server: 2022/05/01-18:30:35 Can't connect to TCP port 10026 on 127.0.0.1 [Permission denied]\n at line 64 in file /usr/share/perl5/vendor_perl/Net/Server/Proto/TCP.pm

User avatar
TrevorH
Site Admin
Posts: 33216
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: amavisd SElinux problem

Post by TrevorH » 2022/05/01 17:06:01

Either use semanage port ... to add a definition that looks like the ones for port 10024 and 10025 or use one of those two ports instead.

Code: Select all

[root@rocky8 ~]# semanage port -l | grep -i amavis
amavisd_recv_port_t            tcp      10024
amavisd_send_port_t            tcp      10025
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Blisk
Posts: 316
Joined: 2011/07/04 14:49:51
Contact:

Re: amavisd SElinux problem

Post by Blisk » 2022/05/01 18:55:17

For both ports already set
ValueError: Port tcp/10024 already defined
ValueError: Port tcp/10025 already defined
But in my log problem is for Port tcp/10026

port 10026 is for spamd and
semanage port -a -t amavisd_send_port_t -p tcp 10026
ValueError: Port tcp/10026 already defined

Post Reply