Allowed rule is denied.

dE de.techno at gmail.com
Sun Sep 14 07:51:34 UTC 2014


Hi.

I'm running CentOS 6. I've httpd running which accesses a file but it 
results in access denied with the following --

type=AVC msg=audit(1410680693.979:40): avc:  denied  { read } for 
pid=987 comm="httpd" name="README.txt" dev=dm-0 ino=12573 
scontext=unconfined_u:system_r:httpd_t:s0 
tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file

However,

sesearch -A | grep 'allow httpd_t' | grep ': file' | grep user_home_t
    allow httpd_t user_home_t : file { ioctl read getattr lock open } ;
    allow httpd_t user_home_t : file { ioctl read getattr lock open } ;
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20140914/0cd179af/attachment.html>


More information about the selinux mailing list