[GF-Users] tlsrpt-reporter

[Peter]

On 30/09/25 12:08, Peter wrote:
> I had to update tlsrpt-reporter for something else so I went ahead and
> removed the -core requirement from the -selinux package.  This means
> that once the changes get pushed out (I'll let you know) you should be
> able to install tlsrpt-reporter-selinux on your postfix hosts and it
> will hopefully allow your postfix hosts to access the tlsrpt sockets (as
> long as they're in the correct directory) that are created by socat
> without any further selinux changes.  I think this will be a better
> solution for you than setting it to permissive.
> 
> I'll let you know once the changes are pushed out so you can try it.

They're pushed out now.  You may have to do:

dnf --repo=gf\* clean metadata

...before dnf will see the new packages.

On your postfix hosts you should do:

dnf install tlsrpt-reporter-selinux

...and that will install the selinux profiles to allow postfix to access 
the tlsrpt sockets.

Let me know how it works.


Peter