I'm trying to run scripts via httpd from a trusted nfs server, but selinux is preventing me:
kernel: audit(1106703013.728:0): avc: denied { execute } for pid=28425 exe=/usr/sbin/httpd name=sanity_server.pl dev=0:12 ino=32407792 scontext=root:system_r:httpd_t tcontext=system_u:object_r:nfs_t tclass=file
So I umounted the nfs volume, and added the following to the mount options in /etc/fstab: context=system_u:object_r:httpd_sys_content_t
I mounted the volume again, and re-tried. That failed with:
kernel: audit(1106705663.904:0): avc: denied { execute_no_trans } for pid=28573 exe=/usr/sbin/httpd path=/mnt/myserver/testing-scripts/sanity_server.pl dev=0:12 ino=3 2407792 scontext=root:system_r:httpd_t tcontext=system_u:object_r:httpd_sys_content_t tclass=file
Now, there's a lot of miscellaneous stuff on /mnt/myserver, not just the web scripts. I need to figure out how to get the scripts working again (preferably without breaking anything else)... they worked fine under RHEL3, but are failing as above under the current RHEL4 candidate.
kernel is: 2.6.9-5.EL #1 SMP Wed Jan 5 19:23:24 EST 2005 ia64 ia64 ia64 GNU/Linux
(The script fails on other architectures, as well; I just happened to be using the ia64 box tonight.)
Any/all words of wisdom appreciated,
-- John