On Thursday 10 January 2008 19:27:18 Yuichi Nakamura wrote: > One example of AVC message in 2.6.24.rc1 is below. > #Type is broken for testing, do not warry about that :) > audit(946684824.060:5): avc: denied { read } for pid=796 comm="httpd" > name="index.html" dev=sda1 ino=61906 scontext=system_u:system_r:httpd_t > tcontext=system_u:object_r:etc_shadow_t tclass=file audit(946684824.060:5): > arch=2a syscall=5 per=800000 success=yes exit=5 a0=48d490 a1=0 a2=1b6 > a3=1b6 items=1 ppid=795 pid=796 auid=4294967295 uid=99 gid=99 euid=99 > suid=99 fsuid=99 egid=99 sgid=99 fsgid=99 tty=(none) comm="httpd" > exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t key=(null) > > File name appears as name="index.html". How can we recreate the problem so that we can see what is going on? Thanks, -Steve -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.