Re: BackupPC 3.1.0 on CentOS 5.2 triggers SE Linux denial

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Johnny Hughes wrote:
Johnny Hughes wrote:
Aleksey Tsalolikhin wrote:
Hi.   I've installed BackupPC 3.1.0 from Testing repository, to Cent
OS 5.2 x86_64, and I am hitting an SE Linux denial - the httpd cannot
talk to the BackupPC socket:

type=AVC msg=audit(07/31/2008 17:18:53.623:410) : avc:  denied  {
connectto } for  pid=11767 comm=httpd
path=/var/log/BackupPC/BackupPC.sock
scontext=user_u:system_r:httpd_t:s0
tcontext=user_u:system_r:initrc_t:s0 tclass=unix_stream_socket

type=AVC msg=audit(07/31/2008 17:18:53.623:410) : avc:  denied  {
write } for  pid=11767 comm=httpd name=BackupPC.sock dev=md0
ino=39813253 scontext=user_u:system_r:httpd_t:s0
tcontext=user_u:object_r:var_log_t:s0 tclass=sock_file

Is there an easy way to fix this, like setting the BackupPC.sock file
universally writeable?  I don't know SE Linux and right now my
objective is to get BackupPC up and running.

I've turned SE Linux off for now, but that's temporary until I get a
more targeted fix.

if you take the text file that contains the issues, and use this command, it will tell you what to do:

audit2allow -i <path_to_file>

in this case, it says to do this:

allow httpd_t initrc_t:unix_stream_socket connectto;
allow httpd_t var_log_t:sock_file write;


To finish this up ...

audit2allow -i <path_to_file> -M backkuppc


CRAP ... that should be backuppc :D

then

semodule -i backuppc.pp

that should install the new module ...

see "man audit2allow" and "man semodule" for more info


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux