FC5, Apache, Bugzilla, SELinux issues

R Edmonds redmonds98 at googlemail.com
Thu Jan 4 16:14:32 UTC 2007


Thanks all for all the helpful replies.  after a few more typos and a few
more yum installs i've gotten the .pp created and attempted to load it with
semodule -i bugzilla.pp

in /var/log/messages i see a similar error to my original post:

Jan  4 15:57:11 svn kernel: security:  3 users, 6 roles, 1489 types, 153
bools, 1 sens, 256 cats
Jan  4 15:57:11 svn kernel: security:  58 classes, 43765 rules
Jan  4 15:57:11 svn dbus: Can't send to audit system: USER_AVC avc:
received policyload notice (seqno=13) : exe="?" (sauid=81, hostname=?,
addr=?, terminal=?)
Jan  4 15:57:11 svn kernel: audit(1167926231.944:32): policy loaded
auid=4294967295
Jan  4 15:57:11 svn dbus: Can't send to audit system: USER_AVC avc:  0 AV
entries and 0/512 buckets used, longest chain length 0 : exe="?" (sauid=81,
hostname=?, addr=?, terminal=?)

However, when I try to hit the bugzilla site from a browser I don't see any
avc denials in /var/log/messages anymore.  So I guess that's fixed that!
Great job!

Of course, Bugzilla STILL doesn't work.  Ho hum... i'll go join some more
mailing lists...

Thanks again for all the help guys.  Time to check the rest of my Bugzilla
install for errors now..

On 04/01/07, Stephen Smalley <sds at tycho.nsa.gov> wrote:
>
> On Thu, 2007-01-04 at 15:33 +0000, R Edmonds wrote:
> > Indeed I did.  Oh well at least I got 3 posts in before making an ass
> > of myself..
> >
> > OK, next hurdle.  The step in Pauls instructions:
> >
> > # ln -s /usr/share/selinux/devel/Makefile .
> >
> >
> >
> > I don't have a devel directory in that path.  Again, some prerequisite
> i'm missing?  I double checked for typos this time ;)
>
> yum install selinux-policy-devel checkpolicy
>
> --
> Stephen Smalley
> National Security Agency
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20070104/672d0095/attachment.htm>


More information about the fedora-selinux-list mailing list