selinux vbetool error

Alex mysqlstudent at gmail.com
Thu Mar 10 16:41:42 UTC 2011


Hi,

>> I've tried running this through audit2allow but it doesn't seem to
>> resolve it, even after rebooting and relabeling.
>>
>> # egrep "httpd|perl|munin|crond" /var/log/audit/audit.log | audit2allow -M mypol
>> # semodule -i mypol.pp
>>
>> These are all related to my recent install of munin. Would
>> reinstalling those packages make any difference?
>>
>> Thanks,
>> Alex
> Those are regular audit messages and have nothing to do with SELinux.
> SELinux message either are type=AVC or type=SELINUX_ERR

Oh :-)

I also ran it with quite a few AVC and SELINUX_ERR messages and it has
had no effect:

type=AVC msg=audit(1299774763.043:2272): avc:  denied  { getattr } for
 pid=3245 comm="httpd" path="/etc/munin/htpasswd.users" dev=sda1
ino=3543833 scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:object_r:munin_etc_t:s0 tclass=file

is this a problem with the policy for munin or my system in general?

Is each package responsible for maintaining their own selinux policy
and installing it at the time the package is installed?

Thanks,
Alex


More information about the users mailing list