smtp mail and SElinux in enforcing mode

[dragonhart]

Hi, I have a problem with sending mail on registration etc... in VBulletin when I turn on my SElinux with enforcing. I use smtp, and NOT the PHP mail function becuase my server isn't configured for sending mail via php. If I turn off enforcing in the SElinux, all is well and the smtp mail sending works. The trouble is I NEED the security of SElinux being in an enforcing state. Any solutions or am I doing something wrong?? The board has been up since last June and I don't recall if I had SElinux in enforcing when I installed VBulleten then or not. Suffice to say I need Selinux ENFORCING now.
Does VBulleting work ok sending e-mails using smtp WITH SElinux enforcing?? I assume it does, so what am I doing wrong??

Thanks....Twalls AKA www.mobildesigns.com

[ErnestA]

Old message, but I have the answers needed so I'll reply anyways.

In the newer Fedoras (and perhaps other Linux installations). SELinux is set to enforce by default, one of the areas you'll notice this causing issues is with mail (whether connecting via port 25 to SMTP, or using PHP mail().

The solution to both of these scenarios is as follows:

To allow PHP/Apache to connect to port 25 issue the following commands as root:

setsebool -P httpd_can_network_connect=1


To allow PHP mail() to work issue the following command as root:

setsebool -P httpd_can_sendmail=1

This should fix both issues.

Regards,

ErnestA