awstats AVC denial

Daniel J Walsh dwalsh at redhat.com
Tue Feb 10 14:38:31 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dominick Grift wrote:
> On Sat, 2009-02-07 at 08:33 -0800, Vadym Chepkov wrote:
>> LOL, 
>> In RedHat I can't read those files at all, but in Fedora it's granted twice:
> 
> I think it is a bug in policy. the "sys" domain should have access to
> "sys" files.
> 
> But if you can fix it using httpd_sys_script_ro_t then thats also fine i
> guess.
> 
>> Sincerely yours,
>>   Vadym Chepkov
>>
>>
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

httpd_sys_script_ro_t == httpd_sys_content_t in F10 and beyond.

Are you hitting this in RHEL5?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmRkWcACgkQrlYvE4MpobPU8gCgm0B1Hz0rRsX/d9NLr29fkbUC
bkwAoITQv993EBsNkHE84IWutCoLlT34
=Nnty
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list