Selinux error help - continued

[Stephen Smalley]

On Thu, 2007-02-08 at 16:09 +0000, Dan Track wrote:
> I've tried to capture the process information that is triggiring these
> alerts but so far I'm failing. Basically the web page is just a form
> which you submit as soon as you press the submit button the whole
> process is over in a second.

Well, you could just wrap the script under strace or autrace or
something similar.

Question:  What happens if you don't allow the getsession permission but
just fix up the file permissions by running chcon as I suggested?  Does
the getsession denial actually prevent it from working?

-- 
Stephen Smalley
National Security Agency