Yes, RHEL5 Sincerely yours, Vadym Chepkov --- On Tue, 2/10/09, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: > From: Daniel J Walsh <dwalsh@xxxxxxxxxx> > Subject: Re: awstats AVC denial > To: "Dominick Grift" <domg472@xxxxxxxxx> > Cc: "Vadym Chepkov" <chepkov@xxxxxxxxx>, "Fedora SELinux" <fedora-selinux-list@xxxxxxxxxx> > Date: Tuesday, February 10, 2009, 9:38 AM > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Dominick Grift wrote: > > On Sat, 2009-02-07 at 08:33 -0800, Vadym Chepkov > wrote: > >> LOL, > >> In RedHat I can't read those files at all, but > in Fedora it's granted twice: > > > > I think it is a bug in policy. the "sys" > domain should have access to > > "sys" files. > > > > But if you can fix it using httpd_sys_script_ro_t then > thats also fine i > > guess. > > > >> Sincerely yours, > >> Vadym Chepkov > >> > >> > > > > -- > > fedora-selinux-list mailing list > > fedora-selinux-list@xxxxxxxxxx > > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list > > httpd_sys_script_ro_t == httpd_sys_content_t in F10 and > beyond. > > Are you hitting this in RHEL5? > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > Comment: Using GnuPG with Fedora - > http://enigmail.mozdev.org > > iEYEARECAAYFAkmRkWcACgkQrlYvE4MpobPU8gCgm0B1Hz0rRsX/d9NLr29fkbUC > bkwAoITQv993EBsNkHE84IWutCoLlT34 > =Nnty > -----END PGP SIGNATURE----- -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
