Milter-greylist

To allow SELinux to do what you want you have to do the following:

1) Put SELinux into permissive mode
    $ setenforce permissive

2) Get milter-greylist to write to the file
    ….
    
3) create custom policy by grep’ng the audit log (note this creates a .pp and .te file)
   $ grep greylist /var/log/audit/audit.log | audit2allow -M [policy_name]

4) Look at what is going to happen
   $ cat [policy_name].te

My guess is you’ll see something like this at the bottom of the file:
#============= greylist_milter_t ==============
allow greylist_milter_t var_log_t:file open;

5) Implement policy
   $ semodule -i [policy_name].pp

Be sure to have 'policycoreutils-python’ installed.

Also, you’ll need 300-400k free to update the semodules

Bill

> On Oct 25, 2016, at 6:36 PM, Fred Smith fredex@fcshome.stoneham.ma.us [milter-greylist] <milter-greylist@yahoogroups.com> wrote:
> 
> On Tue, Oct 25, 2016 at 06:02:40AM +0200, manu@... [milter-greylist] wrote:
> > Fred Smith fredex@... [milter-greylist]
> > <milter-greylist@yahoogroups.com> wrote:
> > 
> > > and for some reason I can't figure out, a few spams leak through
> > > that DO NOT get a x-greylist header inserted. Can any of you shed
> > > any light on this issue for me?
> > 
> > Perhaps you found a bug. Is there some milter-greylist logs about the
> > message?
> 
> I assume you mean the logs, as defined in the basic greylist.conf
> sample file:
> 
> #stat ">>/var/milter-greylist/greylist.log" \
> # "%T{%Y/%m/%d %T} %d [%i] %f -> %r %S (ACL %A) %Xc %Xe %Xm %Xh\n"
> 
> whenever I enable that I get errors about can't open file, permisson
> denied. looking further it seems to be a selinux issue that so far I've
> not figured out the right incantation.
> 
> Fred
> -- 
> ---- Fred Smith -- fredex@... -----------------------------
> "For the word of God is living and active. Sharper than any double-edged 
> sword, it penetrates even to dividing soul and spirit, joints and marrow; 
> it judges the thoughts and attitudes of the heart."  
> ---------------------------- Hebrews 4:12 (niv) ------------------------------
> 
>