Bug 759877 - SELinux is preventing /usr/sbin/suphp from 'open' accesses on the file /var/log/suphp.log.
Summary: SELinux is preventing /usr/sbin/suphp from 'open' accesses on the file /var/l...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 16
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:0d2a69772bed7806c81744157e2...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-04 15:38 UTC by Sandro Mani
Modified: 2011-12-05 20:32 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-12-05 20:32:34 UTC
Type: ---

Attachments (Terms of Use)
File: description (2.26 KB, text/plain)
2011-12-04 15:38 UTC, Sandro Mani 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Description Sandro Mani 2011-12-04 15:38:26 UTC 
libreport version: 2.0.7
executable:     /usr/bin/python
hashmarkername: setroubleshoot
kernel:         3.1.4-1.fc16.x86_64
reason:         SELinux is preventing /usr/sbin/suphp from 'open' accesses on the file /var/log/suphp.log.
time:           Sun 04 Dec 2011 04:36:04 PM CET

description:    Text file, 2318 bytes
Comment 1 Sandro Mani 2011-12-04 15:38:28 UTC 
Created attachment 540348 [details]
File: description
Comment 2 Miroslav Grepl 2011-12-04 21:39:48 UTC 
You will need to add label for this log file

# chcon -t httpd_log_t /var/log/suphp.log

Looks like you created this log by hand?


I see it is created as httpd_log_t.
Comment 3 Sandro Mani 2011-12-05 08:12:49 UTC 
Thanks - the log was automatically created, and no relabeling was performed. I'll try deleting the log and check with which label it gets recreated this evening.
Comment 4 Miroslav Grepl 2011-12-05 10:11:46 UTC 
Ok, let me know. Thank you.
Comment 5 Sandro Mani 2011-12-05 20:32:34 UTC 
All regular now:

[root@PC2 ~]$ rm /var/log/suphp.log 
# Open website, cause some suphp logging
[root@PC2 ~]# stat /var/log/suphp.log 
  File: `/var/log/suphp.log'
  Size: 3585            Blocks: 8          IO Block: 4096   regular file
Device: 803h/2051d      Inode: 1035        Links: 1
Access: (0600/-rw-------)  Uid: (    0/    root)   Gid: (   48/  apache)
Context: system_u:object_r:httpd_log_t:s0
Access: 2011-12-05 21:24:18.987121217 +0100
Modify: 2011-12-05 21:24:25.416035416 +0100
Change: 2011-12-05 21:24:25.416035416 +0100
 Birth: -

Shrug... Closing report.
Note You need to log in before you can comment on or make changes to this bug.