[prev in list] [next in list] [prev in thread] [next in thread]
List: centos
Subject: Re: [CentOS] selinux denial of cgi script with httpd using ssl
From: "Gregory P. Ennis" <PoMec () PoMec ! Net>
Date: 2017-09-05 2:10:08
Message-ID: 1504577408.8454.23.camel () PoMec ! Net
[Download RAW message or body]
On Tue, Sep 5, 2017 at 9:49 AM, Gregory P. Ennis <PoMec@pomec.net> wrote:
> Thanks for your help.
>
> I did pick up an additional entry in the audit file :
>
>
> type=AVC msg=audit(1504561395.709:10196): avc: denied { execute } for
> pid=19163 comm="/usr/sbin/httpd" name="s.check.cgi" dev="dm-0"
> ino=537182029 scontext=system_u:system_r:httpd_t:s0
> tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file
>
> Unfortunately, I am not sure how the above tells me what is wrong.
>
Hi,
Have you then tried passing this message though audit2why ?
Maybe read through https://wiki.centos.org/HowTos/SELinux if you haven't
already.
If you want something simpler maybe try installing setroubleshoot and
setroubleshoot-server.
----------------------------------------------------------------------------
Thanks to everyone, I am in the process of working through everyone's
suggestions, will post what I find that works.
Greg
_______________________________________________
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic