Nagios Web Interface and SELinux

[Daniel J Walsh]

Ryan Skadberg wrote:
> I have been trying to get nagios up and running on 2 different
> machines.  One running FC5 and one running FC6.  Nagios itself starts
> up fine, but the web interface fails miserably.
>
> When looking at /var/log/messages, I see things like:
> Dec  3 11:38:17 xray kernel: audit(1165174697.348:289): avc:  denied
> { execute_no_trans } for  pid=22237 comm="httpd" name="tac.cgi"
> dev=dm-0 ino=11272226 scontext=user_u:system_r:httpd_t:s0
> tcontext=system_u:object_r:lib_t:s0 tclass=file
>
Where is this file located?  Looks like this needs a context like 
httpd_sys_content_t or httpd_sys_script_t.


chcon -R  -t httpd_sys_content_t PATH_TO_DIR
> I noticed in the selinux-policy-targeted Changelog:
>
> * Wed Jul 26 2006 Dan Walsh <dwalsh at redhat.com> 2.3.3-13
> - Add nagios policy
>
> This may have been for the program itself or maybe the web interface,
> but it sure doesn't seem to be working for me.
>
> Both systems are set to:
>
> SELINUX=enforcing
> SELINUXTYPE=targeted
> SETLOCALDEFS=0
>
> Anyone have any advice on how to fix this?
>
> Thanks!
> Skadz
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list