Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: selinux denials of spamd reading files in /var/lib/spamassassin/
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187974
------- Additional Comments From nicolas.mailhot@laposte.net 2006-12-15 03:49 EST ------- (In reply to comment #6)
As far as /var/lib: Is this something the fedora package changes or is this something new?
It's somehow a new upstream feature where updated rules can be distributed separately from the main engine, so the sa people do not have to do full releases every time a spammer thinks of a new trick (similar to new AV checksums)
Does spamd need to read files in /var/lib? Does it need to write them there?
sa needs read access to /var/lib/spamassassin, the rules updating is supposed to be done by a super-user (allowing sa to self-update its ruleset would of course be dangerous)
IMHO /var/lib and not /var/cache or /var/spool is the right place for this kind of stuff