grsecurity forums

If a program (e.g. php) wants to send a mail, it's calling sendmail in it's own context.
Postfix's sendmail wants to read /proc/net/if_inet6 but grsecurity denies this access:

Code: Select all

warning: can't open /proc/net/if_inet6 (Permission denied) - skipping IPv6 configuration
fatal: parameter inet_interfaces: no local interface found for ::1

Recorded with strace:
User with restriction on /proc:

Code: Select all

open("/proc/net/if_inet6", O_RDONLY) = -1 EACCES (Permission denied)

User without restriction on /proc

Code: Select all

open("/proc/net/if_inet6", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0

How can I use IPv6 with Postfix without disabling the /proc securitysetting?
btw: why is if_inet6 in /proc?

Has nobody a solution?
No one using IPv6?