Red Hat Bugzilla – Bug 460759
Awstats causes selinux denials after update
Last modified: 2008-09-24 14:47:41 EDT
Description of problem:
I was using awstats for a while, on CentOS5 with SELinux enabled, without any issue. Upgrading to the latest version available (awstats-6.7-3.el5) seems have reset context in their old way.
Version-Release number of selected component (if applicable):
Upgrade existing awstats installation to the latest available
Steps to Reproduce:
1. Have a working awstats installation, with correct selinux contexts
2. Upgrade to the latest
$ ls -alZ /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
-rwxr-xr-x root root system_u:object_r:usr_t /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
Awstats required context:
# ls -alZ /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
-rwxr-xr-x root root system_u:object_r:httpd_sys_script_exec_t /usr/share/awstats/wwwroot/cgi-bin/awstats.pl
The "problem" should be solved setting correct SELinux contexts as described in the readme.selinux file ; anyway I was not excpecting the update should reset selinux contexts.
Have you got the package awstats-selinux installed?
(the documentation does not explain this, which is a bug and will be fixed)
No at all... I was not aware that such a package was provided ; I've just installed awstats package.
Fixing the doc will be a good point, I should see if the awstats-selinux solves this issue on the next update.
Thanks for the quick answer :)
OK, I am closing this bug for now...if you have further problems please re-open it. I have also checked a README.Fedora into CVS which contains a pointer to the -selinux subpackage.