Problem with IPv6, Postfix and grsecurity

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Problem with IPv6, Postfix and grsecurity

Postby Jtb » Sat Dec 16, 2006 5:02 am

If a program (e.g. php) wants to send a mail, it's calling sendmail in it's own context.
Postfix's sendmail wants to read /proc/net/if_inet6 but grsecurity denies this access:
Code: Select all
warning: can't open /proc/net/if_inet6 (Permission denied) - skipping IPv6 configuration
fatal: parameter inet_interfaces: no local interface found for ::1


Recorded with strace:
User with restriction on /proc:
Code: Select all
open("/proc/net/if_inet6", O_RDONLY) = -1 EACCES (Permission denied)


User without restriction on /proc
Code: Select all
open("/proc/net/if_inet6", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0



How can I use IPv6 with Postfix without disabling the /proc securitysetting?
btw: why is if_inet6 in /proc? ;)
Jtb
 
Posts: 2
Joined: Wed Dec 13, 2006 5:46 pm

Postby Jtb » Fri Jan 26, 2007 5:15 am

Has nobody a solution?
No one using IPv6?
Jtb
 
Posts: 2
Joined: Wed Dec 13, 2006 5:46 pm


Return to grsecurity support