Attachment 596738 Details for Bug 838211 – File: description

File: description

description (text/plain), 2.63 KB, created by teppei.takasaki on 2012-07-07 08:32:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: teppei.takasaki

Created: 2012-07-07 08:32:12 UTC

Size: 2.63 KB

patch

obsolete

>SELinux is preventing /usr/sbin/httpd from 'execute' accesses on the file /home/teppei/.gem/ruby/1.9.1/gems/passenger-3.0.13/ext/apache2/mod_passenger.so.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If httpd ã«ã mod_passenger.so file ã® execute ã¢ã¯ã»ã¹ãããã©ã«ãã§è¨±å¯ãããã¹ãã§ãã   
>Then ããããã°ããã¦å ±åãã¹ãã§ãã 
>ãã®ã¢ã¯ã»ã¹ãè¨±å¯ããããã«ããã¼ã«ã«ããªã·ã¼ã¢ã¸ã¥ã¼ã«ãçæãããã¨ãã§ãã¾ãã
>Do
>ãã®ã¢ã¯ã»ã¹ãä¸æçã«è¨±å¯ããã«ã¯ãä»¥ä¸ãå®è¡ãã¦ãã ããã:
># grep httpd /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:httpd_t:s0
>Target Context                unconfined_u:object_r:user_home_t:s0
>Target Objects                /home/teppei/.gem/ruby/1.9.1/gems/passenger-3.0.13
>                              /ext/apache2/mod_passenger.so [ file ]
>Source                        httpd
>Source Path                   /usr/sbin/httpd
>Port                          <ä¸æ>
>Host                          (removed)
>Source RPM Packages           httpd-2.2.22-4.fc17.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.10.0-134.fc17.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.4.4-3.fc17.x86_64 #1 SMP Tue
>                              Jun 26 20:54:56 UTC 2012 x86_64 x86_64
>Alert Count                   10
>First Seen                    2012å¹´07æ07æ¥ 16æ06å19ç§
>Last Seen                     2012å¹´07æ07æ¥ 17æ16å09ç§
>Local ID                      c99a1daa-189b-4ef2-bf52-eb44eee7ae6d
>
>Raw Audit Messages
>type=AVC msg=audit(1341648969.164:738): avc:  denied  { execute } for  pid=24837 comm="httpd" path="/home/teppei/.gem/ruby/1.9.1/gems/passenger-3.0.13/ext/apache2/mod_passenger.so" dev="dm-2" ino=9441993 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1341648969.164:738): arch=x86_64 syscall=mmap success=no exit=EACCES a0=0 a1=2bd700 a2=5 a3=802 items=0 ppid=1 pid=24837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=httpd exe=/usr/sbin/httpd subj=system_u:system_r:httpd_t:s0 key=(null)
>
>Hash: httpd,httpd_t,user_home_t,file,execute
>
>audit2allowunable to open /sys/fs/selinux/policy:  Permission denied
>
>
>audit2allow -Runable to open /sys/fs/selinux/policy:  Permission denied
>
>

Actions: View

Attachments on bug 838211: 596738