Selinux Query

Support for security such as Firewalls and securing linux
Post Reply
taliez
Posts: 40
Joined: 2013/12/02 06:32:41

Selinux Query

Post by taliez » 2014/04/22 06:33:56

hi all

is selinux blocking the app/file?

log
kernel: type=1400 audit(1398145577.609:7): avc: denied { execute } for pid=3686 comm="httpd" name="PassengerWatchdog" dev=dm-0 ino=657181 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=file


-rwxr-xr-x. 1 root rvm 4152399 Feb 25 16:35 PassengerWatchdog


ls -sZ /usr/local/rvm/gems/ruby-2.1.0/gems/passenger-4.0.37/buildout/agents/PassengerWatchdog
-rwxr-xr-x. root rvm system_u:object_r:usr_t:s0 /usr/local/rvm/gems/ruby-2.1.0/gems/passenger-4.0.37/buildout/agents/PassengerWatchdog


can i change the file context to make this app run ?

thanks in advance

User avatar
eugene.ievlev
Posts: 19
Joined: 2014/02/07 10:41:03
Location: Ukraine
Contact:

Re: Selinux Query

Post by eugene.ievlev » 2014/04/23 12:17:20

Hi taliez,

Try to change context to public_content_rw_t.
And check your SELinux rule:
semanage boolean -l | grep http

if need install the policycoreutils-python package for semanage.

Good luck,
Eugene

Post Reply