Re: [SM-PLUGINS] change_password for FC3 linux?

[Hongwei L. <ho...@wu...>]

>
>> I have a problem with sm plugin change_passwd for
>> squirrelmail-1.4.3a-6.FC3 in my redhat fc3 linux. My this linux has
>> selinux enabled.  I installed compatibility, then change_passwd.  Now,
>> the
>> situation is:
>>
>> 1. If I disable selinux in my fc3 linux, then change_passwd works.
>> 2. If selinux is enabled, change_passwd does not work.  When I set debug
>> = 1, I got:
>>
>>
>> try run  ....chpasswd 'username' 'current-password' 'new-password' 2>&1
>>
>> then, I go to the folder change_passwd in ssh, and run
>>
>> ./chpasswd 'username' 'current-password' 'new-password' 2>&1
>>
>>
>> The password was modified successfully
>>
>> It seems that this is the issue related to selinux.  Does anybody have
>> the same situation as me?
>
> Chances are, it's the security properties on the binary file.  You should
> be able to use "ls -Z" to list the security properties on the binary, and
> make sure that the user running apache has the ability to execute the
> binary.
>
> --
> Jonathan Angliss
> <jo...@sq...>

I've tried that under /usr/share/squirrelmail/plugins/change_passwd

it was:
# ls -lZ chpasswd
-rwsr-x---  root     apache   root:object_r:usr_t              chpasswd

I changed it to:
# chcon -t httpd_sys_content_t chpasswd
# ls -lZ chpasswd
-rwsr-x---  root     apache   root:object_r:httpd_sys_content_t chpasswd

But, it still does not allow any user to change password.  I even tried to
change the setting for the folder change_passwd under
/usr/share/squirrelmail/plugins:

# chcon -t httpd_sys_content_t change_passwd
# ls -ldZ change_passwd
drwxr-xr-x  root     root     root:object_r:httpd_sys_content_t change_passwd

Still not working.  What else should I do?

Thanks!

Hongwei Li