• Dear Pleskians! The Plesk Forum will be undergoing scheduled maintenance on Monday, 7th of July, at 9:00 AM UTC. The expected maintenance window is 2 hours.
    Thank you in advance for your patience and understanding on the matter.

Question Spamassassin DCC Permission issue (SElinux)

Kaspar

API expert
Plesk Guru
Server operating system version
Centos 7.9
Plesk version and microupdate number
18.0.51
I am running into a permission issue after installing DCC for Spamassassin. I suspect this is due to selinux, because when (temporarily) disabling selinux the error is doesn't show. I can't quite figure out how to solve this one.

Code:
dccproc [27291] lock_open(/var/lib/dcc/whiteclnt.dccx): Permission denied; file not writeable for locking
dccproc [27291] open(/var/lib/dcc/map): Permission denied

All files inside the /var/lib/dcc/ directory (and the directory itself) are owned by the popuser user and group. I also did apply selinux security labels to the files.
Code:
restorecon -Rv /usr/bin/cdcc
restorecon -Rv /usr/bin/dcc*
restorecon -Rv /var/lib/dcc/
restorecon -Rv /usr/libexec/dcc/

I suspect I am missing something. Any one any clue? @danami perhaps?
 
@Kaspar Sorry it's been a while since I've looked at DCC. A quick fix might be to make the process type dcc_client_t permissive.

Code:
semanage permissive -a dcc_client_t

Permissive process types are not denied access by SELinux (AVC messages will still be generated).
 
Back
Top