Bug 759877

Summary: SELinux is preventing /usr/sbin/suphp from 'open' accesses on the file /var/log/suphp.log.
Product: [Fedora] Fedora Reporter: Sandro Mani <manisandro>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: dominick.grift, dwalsh, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:0d2a69772bed7806c81744157e21b11ceb9e192e247fc8b1a719e424ed0f4f14
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-05 20:32:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: description none

Description Sandro Mani 2011-12-04 15:38:26 UTC 
libreport version: 2.0.7
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.1.4-1.fc16.x86_64
reason:         SELinux is preventing /usr/sbin/suphp from 'open' accesses on the file /var/log/suphp.log.
time:           Sun 04 Dec 2011 04:36:04 PM CET

description:    Text file, 2318 bytes
Comment 1 Sandro Mani 2011-12-04 15:38:28 UTC 
Created attachment 540348 [details]
File: description
Comment 2 Miroslav Grepl 2011-12-04 21:39:48 UTC 
You will need to add label for this log file

# chcon -t httpd_log_t /var/log/suphp.log

Looks like you created this log by hand?


I see it is created as httpd_log_t.
Comment 3 Sandro Mani 2011-12-05 08:12:49 UTC 
Thanks - the log was automatically created, and no relabeling was performed. I'll try deleting the log and check with which label it gets recreated this evening.
Comment 4 Miroslav Grepl 2011-12-05 10:11:46 UTC 
Ok, let me know. Thank you.
Comment 5 Sandro Mani 2011-12-05 20:32:34 UTC 
All regular now:

[root@PC2 ~]$ rm /var/log/suphp.log 
# Open website, cause some suphp logging
[root@PC2 ~]# stat /var/log/suphp.log 
  File: `/var/log/suphp.log'
  Size: 3585            Blocks: 8          IO Block: 4096   regular file
Device: 803h/2051d      Inode: 1035        Links: 1
Access: (0600/-rw-------)  Uid: (    0/    root)   Gid: (   48/  apache)
Context: system_u:object_r:httpd_log_t:s0
Access: 2011-12-05 21:24:18.987121217 +0100
Modify: 2011-12-05 21:24:25.416035416 +0100
Change: 2011-12-05 21:24:25.416035416 +0100
 Birth: -

Shrug... Closing report.