Yes,
RHEL5
Sincerely yours,
Vadym Chepkov
--- On Tue, 2/10/09, Daniel J Walsh <dwalsh(a)redhat.com> wrote:
> From: Daniel J Walsh <dwalsh(a)redhat.com>
> Subject: Re: awstats AVC denial
> To: "Dominick Grift" <domg472(a)gmail.com>
> Cc: "Vadym Chepkov" <chepkov(a)yahoo.com>, "Fedora SELinux"
<fedora-selinux-list(a)redhat.com>
> Date: Tuesday, February 10, 2009, 9:38 AM
Dominick Grift wrote:
>>> On Sat, 2009-02-07 at 08:33 -0800, Vadym Chepkov
wrote:
>>>> LOL,
>>>> In RedHat I can't read those files at all, but
in Fedora it's granted twice:
>>> I think it is a bug in policy. the "sys"
domain should have access to
>>> "sys" files.
>>>
>>> But if you can fix it using httpd_sys_script_ro_t then
thats also fine i
>>> guess.
>>>
>>>> Sincerely yours,
>>>> Vadym Chepkov
>>>>
>>>>
>>> --
>>> fedora-selinux-list mailing list
>>> fedora-selinux-list(a)redhat.com
>>>
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
httpd_sys_script_ro_t == httpd_sys_content_t in F10 and
beyond.
Are you hitting this in RHEL5?
Ok, I will add this to U4 policy.
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org
iEYEARECAAYFAkmRpQYACgkQrlYvE4MpobND/wCg1sWlIngXzv4zQEhRWN8mb4dr
oKwAnRc3iFie67TAcyNCLofzOW/e4zI2
=YWgZ
-----END PGP SIGNATURE-----