<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd">
<html><head><meta name="qrichtext" content="1" /><style type="text/css">
p, li { white-space: pre-wrap; }
</style></head><body style=" font-family:'Tahoma'; font-size:8.25pt; font-weight:400; font-style:normal;">
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">On Sunday 10 August 2014 22:52:18 jonte+kolab@yojimbo.org wrote:<br /></span></p>
<p style=" margin-top:12px; margin-bottom:12px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Hi there,</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">I'm sort of new here and thought I would drop by and give an thumbs up for a very nicely run project. While I haven't really done much the project caught my eye about 6 month ago while looking for something suitable for an friend to run. Having used </span><span style=" font-size:8pt; font-weight:600;">Roundcube</span><span style=" font-size:8pt;"> Mail for a very long time it dropped by there and that's how I found this place.</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">For the first couple of months I just read the docs, then in may I tried building an test machine for the first time and ehmm nope that didn't work. Was the broken cyrus, so installing from the devel tree got the system running but it still lacked the resource management I saw in the docs but couldn't figure out why it wasn't working. </span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Last week I had another look and </span><span style=" font-size:8pt; font-style:italic;">wow</span><span style=" font-size:8pt;"> 3.3 is in beta, here is the </span><span style=" font-size:8pt; font-weight:600; font-style:italic;">resource management</span><span style=" font-size:8pt;">... ehmm for </span><span style=" font-size:8pt; font-style:italic;">CentOS</span><span style=" font-size:8pt;"> that didn't work, </span><span style=" font-size:8pt; font-style:italic;">Roundcube</span><span style=" font-size:8pt;"> just didn't startup. OH and the </span><span style=" font-size:8pt; font-style:italic;">kolab-webadmin-3.2-5.el6.kolab_3.3.noarch.rpm</span><span style=" font-size:8pt;"> is unsigned. oh well it's a beta.</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">So here are a few observation, but without running an actual machine in production of course, and yea it's CentOS</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">3.2 works very well with the default install, both the Cyrus imapd issue and the clamd.amavisd now installs without having to patch the setup script or using beta packages.</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">For some reason the documentation still say that selinux have to be turned off, this is possibly the case, but the </span><a href="https://github.com/kanarip/kolab-selinux"><span style=" font-size:8pt; text-decoration: underline; color:#0000ff;">https://github.com/kanarip/kolab-selinux</span></a><span style=" font-size:8pt;"> got it almost right.</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">I turn on both </span></p>
<p style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;">/usr/sbin/setsebool -P httpd_can_sendmail on # Cyres etc most things email</span></p>
<p style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;">/usr/sbin/setsebool -P httpd_can_network_connect on # Filters in Roundmail</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">As for the </span><span style=" font-size:8pt; font-style:italic;">kolab.te</span><span style=" font-size:8pt;"> file, it's slightly wrong probably due to the time since it was updated, I needed to change one line to add the </span><span style=" font-size:8pt; font-weight:600; font-style:italic;">initrc_t</span><span style=" font-size:8pt;"> type. </span></p>
<p style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;">#============= cyrus_t ==============</span></p>
<p style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;">allow cyrus_t initrc_t:unix_stream_socket connectto;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Finally I added mod_security, since its after all a web server, so the http application firewall seems to fit very nicely for an security conscious individual ( reads: paranoid ).</span></p>
<p style=" margin-top:12px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;">yum -y install mod_security mod_security_crs mod_security_crs-extras</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">You probably don't need extras, but I was playing around. Ah the pain. Anyway, 2 things really needs adjusted:</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<ul type="square" style="margin-top: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; -qt-list-indent: 1;"><li style=" font-family:'sans-serif'; font-size:8pt;" style=" margin-top:4px; margin-bottom:1px; margin-left:20px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:13px;">To enable active sync, find id 900012 in</span></li></ul>
<p style=" margin-top:12px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;">/etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf</span></p>
<ul type="square" style="margin-top: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; -qt-list-indent: 1;"><li style=" font-family:'sans-serif'; font-size:8pt;" style=" margin-top:4px; margin-bottom:1px; margin-left:20px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:13px;">add: application/vnd.ms-sync.wbxm</span></li></ul>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'sans-serif'; font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'sans-serif'; font-size:8pt;">Or you can add the following to the file </span><span style=" font-family:'sans-serif'; font-size:8pt; font-weight:600;">/etc/httpd/conf.d/kolab-syncroton.conf</span></p>
<p style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"><LocationMatch "^/Microsoft-Server-ActiveSync"></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960010</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960017 </span></p>
<p style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"></LocationMatch></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">For the WAP pages, you need to add the following to the file </span><span style=" font-family:'sans-serif'; font-size:8pt; font-style:italic;">/etc/httpd/conf.d/kolab-webadmin.conf</span></p>
<p style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"><LocationMatch "^/kolab-webadmin/.*"></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 950007</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960011</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960015</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960024</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981173</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981243</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981245</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981246</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981257</span></p>
<p style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:8pt; color:#000000; background-color:#f9f9f9;"></LocationMatch></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">And now everything seems to work. If you're going to play around with mod_security, please know what your doing, it's an pain to figure out what's wrong. I cheated and used </span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><a href="http://www.samhobbs.co.uk/2014/05/apache-modsecurity-whitelist-generator-script"><span style=" font-size:8pt; font-weight:600; text-decoration: underline; color:#0000ff;">http://www.samhobbs.co.uk/2014/05/apache-modsecurity-whitelist-generator-script</span></a><span style=" font-size:8pt;"> to track down which modules where venerable, and it would probably be best if the mechanism didn't trigger these alerts, but I'm not an developer so it's probably safe. </span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">In conclusion I'm looking forward to 3.3 with the resource module coming out of beta and being released. Keep up the good work and keep your SElinux enabled. </span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Cheers,</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> Jonte.</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> </span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">To be honest jumping from debian selinux confused the hell out of me.</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Initially I installed git and cloned from kanarip</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Did a make -f /usr/share/selinux/devel/Makefile & semodule -i kolab.pp</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Maybe my noobness but wasn't able to send emails.</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">So I started again fresh with a clean audit.log and did as many actions as possible.</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">created my own folder selinux & ran audit2allow -M kolab < /var/log/audit/audit.log</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br />I had a look at the te file and it gave me a few pointers</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> /usr/sbin/setsebool -P httpd_can_sendmail on</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> /usr/sbin/setsebool -P httpd_can_network_connect on</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">/usr/sbin/setsebool -P allow_ypbind on</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">so did the above cleaned audit.log removed the previous policy reboot and try some stuff again.</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">I ended up with a small te file and I guess all the sll and stuff is missing and also I should add the missing kanarip te entries.</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">module kolab 1.0;</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">require {</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type cyrus_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type var_log_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type dirsrvadmin_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type postfix_smtpd_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type postfix_master_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type initrc_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> type console_device_t;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> class unix_stream_socket connectto;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> class file write;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"> class chr_file open;</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">}</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">#============= cyrus_t ==============</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">allow cyrus_t initrc_t:unix_stream_socket connectto;</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">#============= dirsrvadmin_t ==============</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">allow dirsrvadmin_t console_device_t:chr_file open;</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">#============= postfix_master_t ==============</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">allow postfix_master_t var_log_t:file write;</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">#============= postfix_smtpd_t ==============</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">allow postfix_smtpd_t initrc_t:unix_stream_socket connectto;</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Edited /etc/selinux/config back to enforcing</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">reboot</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Things seem to be running fine but haven't done the ssl side of things yet.</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Just wondered by doing that way I have just accepted quite wide ranging defaults? Or is this dumb noob getting his head round selinux :)</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;">Stuart</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:8pt;"><br /></span></p><hr size="1px" noshade style="clear:both;margin-top:10px;height:1px;">
<div style="font:12px Verdana,sans-serif;color:Black;background:white;padding:3px;line-height:1.3em">
<a href="http://mysecurelogon.com/password-manager"><img src="http://my.inbox.com/img/ftrs/mlman3703.jpg" width="424" height="73" alt="Can't remember your password? Do you need a strong and secure password? Use Password manager! It stores your passwords & protects your account." border="0" style="margin-bottom:10px" /></a></div>
</body></html>