Attachment 290359 Details for Bug 426715 – selinux policy alert report

selinux policy alert report

selinux_alert.txt (text/plain), 1.81 KB, created by logan on 2007-12-24 21:02:22 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: logan

Created: 2007-12-24 21:02:22 UTC

Size: 1.81 KB

patch

obsolete

>Summary
>    SELinux is preventing the httpd from using potentially mislabeled files
>    <Unknown> (var_t).
>
>Detailed Description
>    SELinux has denied the httpd access to potentially mislabeled files
>    <Unknown>.  This means that SELinux will not allow httpd to use these files.
>    Many third party apps install html files in directories that SELinux policy
>    cannot predict.  These directories have to be labeled with a file context
>    which httpd can access.
>
>Allowing Access
>    If you want to change the file context of <Unknown> so that the httpd daemon
>    can access it, you need to execute it using chcon -t httpd_sys_content_t
>    <Unknown>.  You can look at the httpd_selinux man page for additional
>    information.
>
>Additional Information        
>
>Source Context                system_u:system_r:httpd_t:s0
>Target Context                system_u:object_r:var_t:s0
>Target Objects                None [ sock_file ]
>Affected RPM Packages         
>Policy RPM                    selinux-policy-3.0.8-68.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Permissive
>Plugin Name                   plugins.httpd_bad_labels
>Host Name                     new-host-3
>Platform                      Linux new-host-3 2.6.23.9-85.fc8 #1 SMP Fri Dec 7
>                              15:49:59 EST 2007 i686 athlon
>Alert Count                   2
>First Seen                    Sun 23 Dec 2007 04:11:05 PM EST
>Last Seen                     Sun 23 Dec 2007 08:20:20 PM EST
>Local ID                      a5475c61-f816-4b54-af06-8eee75b09849
>Line Numbers                  
>
>Raw Audit Messages            
>
>avc: denied { write } for comm=httpd dev=sdb6 name=nfsen.comm pid=2999
>scontext=system_u:system_r:httpd_t:s0 tclass=sock_file
>tcontext=system_u:object_r:var_t:s0
>

Actions: View

Attachments on bug 426715: 290359