Hi, I'm running slimserver (http://slimdevices.com) on a minimal FC6 system. I have created a slimserver user with homedir /opt/slimserver, and the main binary runs out of /opt/slimseve/rtrunk/server (I'm running the latest dev version from svn) When I fire it up I get an avc error. audit2allow produces this: allow unconfined_t user_home_t:file execmod; I know how to modify the policy to allow this but I'm wondering how I might go about identifying what's causing the problem and fixing it more specifically, i.e. using chcon or something? This is the full text of the error in audit.log: type=AVC msg=audit(1163892174.128:14): avc: denied { execmod } for pid=1364 comm="slimserver.pl" name="mysql.so" dev=dm-2 ino=200014 scontext=root:system_r:unconfined_t:s0-s0:c0.c1023 tcont ext=root:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1163892174.128:14): arch=40000003 syscall=125 success=no exit=-13 a0=8d0000 a1=2a000 a2=5 a3=bfc37f10 items=0 ppid=1360 pid=1364 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="slimserver.pl" exe="/usr/bin/perl" subj=root:system_r:unconfined_t:s0-s0:c0.c1023 key=(null) type=AVC_PATH msg=audit(1163892174.128:14): path="/opt/slimserver/trunk/server/CPAN/arch/5.8/i386-linux-thread-multi/auto/DBD/mysql/mysql.so" Any idea how I can resolve this? Thanks, R. -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
