Question Spamassassin DCC Permission issue (SElinux)

[Kaspar]

Server operating system version

Centos 7.9

Plesk version and microupdate number

18.0.51

I am running into a permission issue after installing DCC for Spamassassin. I suspect this is due to selinux, because when (temporarily) disabling selinux the error is doesn't show. I can't quite figure out how to solve this one.

dccproc [27291] lock_open(/var/lib/dcc/whiteclnt.dccx): Permission denied; file not writeable for locking
dccproc [27291] open(/var/lib/dcc/map): Permission denied

All files inside the /var/lib/dcc/ directory (and the directory itself) are owned by the popuser user and group. I also did apply selinux security labels to the files.

restorecon -Rv /usr/bin/cdcc
restorecon -Rv /usr/bin/dcc*
restorecon -Rv /var/lib/dcc/
restorecon -Rv /usr/libexec/dcc/

I suspect I am missing something. Any one any clue? @danami perhaps?

 

[danami]

@Kaspar Sorry it's been a while since I've looked at DCC. A quick fix might be to make the process type dcc_client_t permissive.

semanage permissive -a dcc_client_t

Permissive process types are not denied access by SELinux (AVC messages will still be generated).

 

[Kaspar]

It's looks like DCC is working without any (noticeable) issues despite the errors. After some digging around I also found that DCC (probably) requires a custom policy as it's not part of the default RHEL packages.

Thnx @danami, for the suggestion.