[GF-Users] tlsrpt-reporter

[Peter]

On 30/09/25 10:23, Peter wrote:
> It might help to install tlsrpt-reporter-selinux on the postfix hosts
> but currently that has a require set for tlsrpt-reporter-core which you
> don't want on those hosts.  If you think this might be helpful I can
> rebuild the package without the tlsrpt-reporter-core requirement so you
> can just install the -selinux package on the postfix boxes.  This way if
> you configure socat to place the socket files in the same directory as
> tlsrpt-reporter (/var/run/tlsrpt) it should fix the selinux issues with
> postfix on the postfix hosts.

I had to update tlsrpt-reporter for something else so I went ahead and 
removed the -core requirement from the -selinux package.  This means 
that once the changes get pushed out (I'll let you know) you should be 
able to install tlsrpt-reporter-selinux on your postfix hosts and it 
will hopefully allow your postfix hosts to access the tlsrpt sockets (as 
long as they're in the correct directory) that are created by socat 
without any further selinux changes.  I think this will be a better 
solution for you than setting it to permissive.

I'll let you know once the changes are pushed out so you can try it.


Peter