Bug in audit2allow?

Cream[DONut] lists at donut.dk
Fri Sep 17 00:02:52 UTC 2004


I think i found a bug in audit2allow, when parsing this line:
Sep 15 21:10:45 DONut kernel: audit(1095275445.237:0): avc:  denied  { 
write } for  pid=3463 exe=/usr/sbin/httpd 
path=/home/iced/www/thumbs/albums/Iced does Greece/parga2003-1 019.jpg 
dev=hda2 ino=1459429 scontext=root:system_r:httpd_t 
tcontext=root:object_r:httpd_user_content_t tclass=file

(running in permissive mode)


it turns it into this:
allow httpd_t httpd_user_content_t:dir { add_name create write };
         #EXE=/usr/sbin/httpd  NAME=albums   :  write
         #EXE=/usr/sbin/httpd  NAME=Iced   :  add_name
         #EXE=/usr/sbin/httpd  NAME=Iced   :  create
         #EXE=/usr/sbin/httpd  NAME=Iced   :  write
         #EXE=/usr/sbin/httpd  NAME=parga2003-1   :  add_name

as you can see the spaces in the dir name seems to cause problems.



More information about the fedora-selinux-list mailing list