<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.3">
<TITLE>Re: [F8] (Re)Starting httpd reveals php pdf.so stack permission errors...</TITLE>
</HEAD>
<BODY>
<BR>
On Mon, 2008-02-18 at 17:14 -0800, Todd Zullinger wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#000000">Daniel B. Thurman wrote:</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> Ok....</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> I tried:</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> 1) grep execstack /var/log/audit/audit.log | audit2allow -m myphp</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> module myphp 1.0;</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> 2) semodule -i myphp.pp</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> semodule: Could not read file 'myphp.pp': No such file or directory</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> Seems that the myphp.pp file is never created, at least I cannot</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> find it....</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">You want -M instead of -m as the argument to audit2allow AFAIK.</FONT></FONT><BR>
<BR>
</BLOCKQUOTE>
<BR>
ok... 3rd try:<BR>
<BR>
1) grep execstack /var/log/audit/audit.log | audit2allow -M myphp<BR>
compilation failed:<BR>
(unknown source)::ERROR 'syntax error' at token '' on line 6:<BR>
<BR>
<BR>
/usr/bin/checkmodule: error(s) encountered while parsing configuration<BR>
/usr/bin/checkmodule: loading policy configuration from myphp.te<BR>
<BR>
2) semodule -i myphp.pp<BR>
semodule: Could not read file 'myphp.pp': No such file or directory<BR>
<BR>
<BR>
</BODY>
</HTML>