cojo

[Log in to get rid of this advertisement]

Can anyone tell what I need to enable in SELinux to allow Squirrelmail to work on my FC3 server?

Here is my server layout:

FC3-->Sendmail, Dovecot(POP & IMAP), Apache, Squirrelmail, & SELinux.

when SELinux is on. I get permission denied when I tried to login from Squirrelmail. Here is the error message:

Login Screen:
Error connecting to IMAP server: mail.jurgiel.com.
13 : Permission denied

Messages Log
Nov 19 20:40:44 mail kernel: audit(1132454444.934:107): avc: denied { connect } for pid=3697 comm="httpd" scontext=root:system_r:httpd_t tcontext=root:system_r:httpd_t tclass=tcp_socket

When SELinux is off. Squirrelmail work perfectly. So, I know SELinux is the cause of my problem. Now, I just need to know what I need to enable to get Squirrelmail to work with SELinux running. Here is my booleans file for SELinux

httpd_enable_cgi=1
httpd_enable_homedirs=1
httpd_enable_tcp=1
httpd_ssi_exec=1
httpd_builtin_scripting=1
named_write_master_zones=0
httpd_unified=1
httpd_tty_comm=1
allow_execmod=1
allow_execmem=1

macemoneta

Here's the process (as root):

1. Set your system to permissive mode:

setenforce 0

2. Use Squirrelmail as thoroughly as possible (try out all the features and functions).

3. Install the policy source:

yum -y install selinux-policy-targeted-sources

4. Run the command:

audit2allow -l -i /var/log/messages >> /etc/selinux/targeted/src/policy/domains/misc/local.te

5. Rebuild your local policy:

/usr/bin/make -C /etc/selinux/targeted/src/policy/ reload

6. Re-enable enforcing mode:

setenforce 1

cojo

macemoneta,

thanks for your replied. I was able to get my Squirrelmail to work with your instructions.

John