Bug 148427

Summary:	postfix with pam_winbind
Product:	[openSUSE] SUSE Linux 10.1	Reporter:	Stephan Kulow <coolo>
Component:	AppArmor	Assignee:	Dominic W Reynolds <dreynolds>
Status:	RESOLVED FIXED	QA Contact:	Dominic W Reynolds <dreynolds>
Severity:	Normal
Priority:	P5 - None
Version:	Beta 3
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Stephan Kulow 2006-02-06 16:52:06 UTC

Saw that in my /var/log and thought you might want to know:

Feb  6 16:11:23 titania klogd: audit(1139238683.334:4): REJECTING w access to /tmp/.winbindd/pipe (qmgr(22078) profile /usr/lib/postfix/qmgr active /usr/lib/postfix/qmgr)

Comment 1 Dominic W Reynolds 2006-02-07 05:12:02 UTC

I will update the profile for qmgr. 
If you run this use case (postfix & pam_winbind) would you mind sticking qmgr into complain mode:

 complain /usr/lib/postfix/qmgr

And then attaching the audit logs after you run for a bit?

I can grab any more entries from the log files.

Thanks stephan.

Comment 2 Stephan Kulow 2006-02-07 07:00:18 UTC

I'm afraid I don't really use qmgr on this setup, but I will try what it brings me

Comment 3 Stephan Kulow 2006-02-07 11:37:46 UTC

just saw in my log: /usr/sbin/nscd tries to write to that pipe too

Comment 4 Seth R Arnold 2006-02-07 18:31:52 UTC

Thanks coolo; access to this pipe has been added to nscd, as well as all programs that use nameservice routines. Please reopen if there is a problem in later betas.