Bug 460759 - Awstats causes selinux denials after update
Awstats causes selinux denials after update
Status: CLOSED NOTABUG
Product: Fedora EPEL
Classification: Fedora
Component: awstats (Show other bugs)
el5
All Linux
medium Severity medium
: ---
: ---
Assigned To: Tim Jackson
Fedora Extras Quality Assurance
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2008-08-31 02:59 EDT by Johan Cwiklinski
Modified: 2008-09-24 14:47 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2008-09-24 14:47:41 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Johan Cwiklinski 2008-08-31 02:59:44 EDT
Description of problem:
I was using awstats for a while, on CentOS5 with SELinux enabled, without any issue. Upgrading to the latest version available (awstats-6.7-3.el5) seems have reset context in their old way.


Version-Release number of selected component (if applicable):
awstats-6.7-3.el5


How reproducible:
Upgrade existing awstats installation to the latest available


Steps to Reproduce:
1. Have a working awstats installation, with correct selinux contexts
2. Upgrade to the latest
  
Actual results:
Default context:
$ ls -alZ /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
-rwxr-xr-x  root root system_u:object_r:usr_t          /usr/share/awstats/wwwroot/cgi-bin/awstats.pl


Expected results:
Awstats required context:
# ls -alZ /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
-rwxr-xr-x  root root system_u:object_r:httpd_sys_script_exec_t /usr/share/awstats/wwwroot/cgi-bin/awstats.pl

Additional info:
The "problem" should be solved setting correct SELinux contexts as described in the readme.selinux file ; anyway I was not excpecting the update should reset selinux contexts.
Comment 1 Tim Jackson 2008-08-31 06:07:12 EDT
Have you got the package awstats-selinux installed?
(the documentation does not explain this, which is a bug and will be fixed)
Comment 2 Johan Cwiklinski 2008-08-31 07:45:36 EDT
No at all... I was not aware that such a package was provided ; I've just installed awstats package.

Fixing the doc will be a good point, I should see if the awstats-selinux solves this issue on the next update.

Thanks for the quick answer :)
Comment 3 Tim Jackson 2008-09-24 14:47:41 EDT
OK, I am closing this bug for now...if you have further problems please re-open it. I have also checked a README.Fedora into CVS which contains a pointer to the -selinux subpackage.

Note You need to log in before you can comment on or make changes to this bug.