Selinux and awstats [Solved]

Claude Jones cjones at levitjames.com
Thu Jul 17 22:17:30 UTC 2008


On Thursday 10 July 2008 12:08:28 Claude Jones wrote:
> On Thursday 10 July 2008 11:31:48 Daniel J Walsh wrote:
> > Sorry about the path problems.
>
> no problem
>
> > If matchpathcon returns no errors, you should be fine now.
>
> # matchpathcon /var/lib/awstats
> /var/lib/awstats        system_u:object_r:awstats_var_lib_t
>
> As you can see above, it appears to be good. Thanks as always
> for your help.

Dan: A final report. After rebooting several times, and running 
smart many times, both of which used to produce many lines of the 
awstats/selinux messages, I think I can safely say that the 
problem has been solved. I wish I understood what your commands 
did, exactly - if you have a little time to respond to this, I 
would really appreciate a synopsis of your diagnosis and cure. I 
guess that somehow, two different policies were generated with 
regard to awstats, and that's what you were detecting with the 
matchpathcon command? Is that a fair understanding from my read 
of the man page? The semodule -B command was to force a rewrite 
of the policy, though I'm not sure to what end, as I read it... 
And somehow, you found and had me erase the multiple contexts?

-- 
Claude Jones
Levit & James, Inc.
Leesburg, VA
703-771-1549
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20080717/99ec7a78/attachment-0001.htm>


More information about the fedora-list mailing list