Bug 460759 - Awstats causes selinux denials after update
Summary: Awstats causes selinux denials after update
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: awstats
Version: el5
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Tim Jackson
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-08-31 06:59 UTC by Johan Cwiklinski
Modified: 2008-09-24 18:47 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-09-24 18:47:41 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Johan Cwiklinski 2008-08-31 06:59:44 UTC
Description of problem:
I was using awstats for a while, on CentOS5 with SELinux enabled, without any issue. Upgrading to the latest version available (awstats-6.7-3.el5) seems have reset context in their old way.


Version-Release number of selected component (if applicable):
awstats-6.7-3.el5


How reproducible:
Upgrade existing awstats installation to the latest available


Steps to Reproduce:
1. Have a working awstats installation, with correct selinux contexts
2. Upgrade to the latest
  
Actual results:
Default context:
$ ls -alZ /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
-rwxr-xr-x  root root system_u:object_r:usr_t          /usr/share/awstats/wwwroot/cgi-bin/awstats.pl


Expected results:
Awstats required context:
# ls -alZ /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
-rwxr-xr-x  root root system_u:object_r:httpd_sys_script_exec_t /usr/share/awstats/wwwroot/cgi-bin/awstats.pl

Additional info:
The "problem" should be solved setting correct SELinux contexts as described in the readme.selinux file ; anyway I was not excpecting the update should reset selinux contexts.

Comment 1 Tim Jackson 2008-08-31 10:07:12 UTC
Have you got the package awstats-selinux installed?
(the documentation does not explain this, which is a bug and will be fixed)

Comment 2 Johan Cwiklinski 2008-08-31 11:45:36 UTC
No at all... I was not aware that such a package was provided ; I've just installed awstats package.

Fixing the doc will be a good point, I should see if the awstats-selinux solves this issue on the next update.

Thanks for the quick answer :)

Comment 3 Tim Jackson 2008-09-24 18:47:41 UTC
OK, I am closing this bug for now...if you have further problems please re-open it. I have also checked a README.Fedora into CVS which contains a pointer to the -selinux subpackage.


Note You need to log in before you can comment on or make changes to this bug.