Attachment 154487 Details for Bug 239710 – selinux troubleshooter output log

selinux troubleshooter output log

httpd.txt (text/plain), 1.86 KB, created by ericm24x7 on 2007-05-10 17:34:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: ericm24x7

Created: 2007-05-10 17:34:30 UTC

Size: 1.86 KB

patch

obsolete

>Summary
>    SELinux is preventing /usr/sbin/httpd (httpd_t) "getattr" to /a
>    (rsync_data_t).
>
>Detailed Description
>    SELinux denied access to /a requested by /usr/sbin/httpd. /a has a context
>    used for sharing by different program. If you would like to share /a from
>    /usr/sbin/httpd also, you need to change its file context to
>    public_content_t.  If you did not intend to this access, this could signal a
>    intrusion attempt.
>
>Allowing Access
>    You can alter the file context by executing chcon -t public_content_t /a
>
>    The following command will allow this access:
>    chcon -t public_content_t /a
>
>Additional Information        
>
>Source Context                user_u:system_r:httpd_t
>Target Context                system_u:object_r:rsync_data_t
>Target Objects                /a [ dir ]
>Affected RPM Packages         httpd-2.2.4-3 [application]
>Policy RPM                    selinux-policy-2.6.1-1.fc7
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   plugins.public_content
>Host Name                     fiji3
>Platform                      Linux fiji3 2.6.21-1.3116.fc7 #1 SMP Thu Apr 26
>                              10:17:55 EDT 2007 x86_64 x86_64
>Alert Count                   2
>First Seen                    Thu 10 May 2007 12:06:18 PM EDT
>Last Seen                     Thu 10 May 2007 12:06:18 PM EDT
>Local ID                      8e18fa34-d4fb-4f87-a328-95dddac243a6
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { getattr } for comm="httpd" dev=sda6 egid=48 euid=48
>exe="/usr/sbin/httpd" exit=-13 fsgid=48 fsuid=48 gid=48 items=0 name="/"
>path="/a" pid=3809 scontext=user_u:system_r:httpd_t:s0 sgid=48
>subj=user_u:system_r:httpd_t:s0 suid=48 tclass=dir
>tcontext=system_u:object_r:rsync_data_t:s0 tty=(none) uid=48
>

Actions: View

Attachments on bug 239710: 154487