SELinux protect my squid using havp as parent proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



After upgrade to FC5, my squid cannot using havp (localhost:8080) as parent proxy anymore. The audit log msg is here:

===> /var/log/audit/audit.log
type=AVC msg=audit(1152671338.823:21775): avc:  denied  { name_connect } for  pid=2371 comm="squid" dest=8080 scontext=system_u:system_r:squid_t:s0 tcontext=system_u:object_r:http_cache_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1152671338.823:21775): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf9eb1a0 a2=52e1c4 a3=b7f1ca2c items=0 pid=2371 auid=4294967295 uid=23 gid=23 euid=23 suid=0 fsuid=23 egid=23 sgid=23 fsgid=23 tty=(none) comm="squid" exe="/usr/sbin/squid" subj=system_u:system_r:squid_t:s0
type=SOCKADDR msg=audit(1152671338.823:21775): saddr=02001F907F0000010000000000000000
type=SOCKETCALL msg=audit(1152671338.823:21775): nargs=3 a0=12 a1=bbdd8f8 a2=10

How to fix this? Thx

-- 
fedora-extras-list mailing list
fedora-extras-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-extras-list

[Index of Archives]     [Fedora General Discussion]     [Fedora Art]     [Fedora Docs]     [Fedora Package Review]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite Backpacking]     [KDE Users]

  Powered by Linux