Bug in audit2allow?
I think i found a bug in audit2allow, when parsing this line:
Sep 15 21:10:45 DONut kernel: audit(1095275445.237:0): avc: denied {
write } for pid=3463 exe=/usr/sbin/httpd
path=/home/iced/www/thumbs/albums/Iced does Greece/parga2003-1 019.jpg
dev=hda2 ino=1459429 scontext=root:system_r:httpd_t
tcontext=root:object_r:httpd_user_content_t tclass=file
(running in permissive mode)
it turns it into this:
allow httpd_t httpd_user_content_t:dir { add_name create write };
#EXE=/usr/sbin/httpd NAME=albums : write
#EXE=/usr/sbin/httpd NAME=Iced : add_name
#EXE=/usr/sbin/httpd NAME=Iced : create
#EXE=/usr/sbin/httpd NAME=Iced : write
#EXE=/usr/sbin/httpd NAME=parga2003-1 : add_name
as you can see the spaces in the dir name seems to cause problems.