<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.3">
<TITLE>Re: [F8] (Re)Starting httpd reveals php pdf.so stack permission errors...</TITLE>
</HEAD>
<BODY>
<BR>
On Mon, 2008-02-18 at 16:43 -0800, Todd Zullinger wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#000000">Daniel B. Thurman wrote:</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> 1) execstack -c /usr/lib/php/modules/pdf.so</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> <nothing></FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">> 2) grep execstack /var/log/audit/audit.log | grep audit2allow -m myphp</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000"> this > ^^^^</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">causes this:</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">> grep: invalid max count</FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#000000">You're calling grep rather than audit2allow as intended. Remove the</FONT></FONT><FONT COLOR="#000000"> </FONT><BR>
<FONT SIZE="2"><FONT COLOR="#000000">grep after the pipe.</FONT></FONT><BR>
<BR>
</BLOCKQUOTE>
<BR>
Ok....<BR>
<BR>
I tried:<BR>
<BR>
1) grep execstack /var/log/audit/audit.log | audit2allow -m myphp<BR>
<BR>
module myphp 1.0;<BR>
<BR>
2) semodule -i myphp.pp<BR>
semodule: Could not read file 'myphp.pp': No such file or directory<BR>
<BR>
Seems that the myphp.pp file is never created, at least I cannot<BR>
find it....<BR>
<BR>
</BODY>
</HTML>