It reads it as a config file
cat /usr/share/nagios/html/config.inc.php
<?php
//
$cfg['cgi_config_file']='/etc/nagios/cgi.cfg'; // location of the CGI
config file
$cfg['cgi_base_url']='/nagios/cgi-bin/';
// FILE LOCATION DEFAULTS
$cfg['main_config_file']='/etc/nagios/nagios.cfg'; // default location of
the main Nagios config file
$cfg['status_file']='/var/log/nagios/status.dat'; // default location of
Nagios status file
$cfg['state_retention_file']='/var/log/nagios/retention.dat'; // default
location of Nagios retention file
Sincerely yours,
Vadym Chepkov
--- On Thu, 10/29/09, Daniel J Walsh <dwalsh(a)redhat.com> wrote:
From: Daniel J Walsh <dwalsh(a)redhat.com>
Subject: Re: nagios avc
To: "Vadym Chepkov" <chepkov(a)yahoo.com>
Cc: "Fedora SELinux" <fedora-selinux-list(a)redhat.com>
Date: Thursday, October 29, 2009, 3:31 PM
On 10/29/2009 02:58 PM, Vadym Chepkov
wrote:
> Hi,
>
> I think it's a legitimate access call that needs to be
allowed:
>
> type=AVC msg=audit(1256842390.777:50774): avc:
denied { read } for pid=17310 comm="httpd"
name="status.dat" dev=dm-3 ino=182451
scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:object_r:nagios_log_t:s0 tclass=file
>
>
> Sincerely yours,
> Vadym Chepkov
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list(a)redhat.com
>
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
>
Apache shares the nagious log data?