Re: Selinux and awstats [Solved]

[Claude Jones]

On Thursday 10 July 2008 12:08:28 Claude Jones wrote:
>  On Thursday 10 July 2008 11:31:48 Daniel J Walsh wrote:
>  > Sorry about the path problems.
>
>  no problem
>
>  > If matchpathcon returns no errors, you should be fine now.
>
>  # matchpathcon /var/lib/awstats
>  /var/lib/awstats        system_u:object_r:awstats_var_lib_t
>
>  As you can see above, it appears to be good. Thanks as always
>  for your help. 
Dan: A final report. After rebooting several times, and running 
smart many times, both of which used to produce many lines of the 
awstats/selinux messages, I think I can safely say that the 
problem has been solved. I wish I understood what your commands 
did, exactly - if you have a little time to respond to this, I 
would really appreciate a synopsis of your diagnosis and cure. I 
guess that somehow, two different policies were generated with 
regard to awstats, and that's what you were detecting with the 
matchpathcon command? Is that a fair understanding from my read 
of the man page? The semodule -B command was to force a rewrite 
of the policy, though I'm not sure to what end, as I read it... 
And somehow, you found and had me erase the multiple contexts?

-- 
Claude Jones
Levit & James, Inc.
Leesburg, VA
703-771-1549