From: Daniel J Walsh <dwalsh@redhat.com>
To: Jan-Frode Myklebust <janfrode@tanso.net>
Cc: SELinux@tycho.nsa.gov
Subject: Re: Centos5 setroubleshoot failure
Date: Wed, 12 Sep 2007 10:29:29 -0400 [thread overview]
Message-ID: <46E7F7C9.2040406@redhat.com> (raw)
In-Reply-To: <slrnfefdrj.p00.janfrode@lc4eb8045376502.ibm.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jan-Frode Myklebust wrote:
> I want the setroubleshooter to send me email on denials,
> so to test this I put a file of type "system_u:object_r:rpm_log_t"
> into /var/www/html and tried to access it trough apache. This
> gives me an AVC denial, and no mail. Setroubleshoot logs a traceback:
>
> [Wed Sep 12 11:49:52 2007] [error] [client 148.122.207.136] (13)Permission denied: access to /z.html denied
>
> [root@via log]# 2007-09-12 11:49:54,887 [avc.ERROR] Plugin Exception plugins.httpd_bad_labels
> Traceback (most recent call last):
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 260, in analyze_avc
> report_receiver.report_problem(report)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/server.py", line 145, in report_problem
> self.database.set_filter(self, siginfo.sig, addr, FILTER_ALWAYS)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 468, in set_filter
> siginfo = self.lookup_signature(sig)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 388, in lookup_signature
> matches = self.sigs.match_signatures(sig)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/signature.py", line 1265, in match_signatures
> if pat.__dict__[name] == sig.__dict__[name]:
> KeyError: 'analysis_id'
> 2007-09-12 11:49:55,034 [avc.ERROR] Plugin Exception plugins.disable_trans
> Traceback (most recent call last):
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 260, in analyze_avc
> report_receiver.report_problem(report)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/server.py", line 145, in report_problem
> self.database.set_filter(self, siginfo.sig, addr, FILTER_ALWAYS)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 468, in set_filter
> siginfo = self.lookup_signature(sig)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 388, in lookup_signature
> matches = self.sigs.match_signatures(sig)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/signature.py", line 1265, in match_signatures
> if pat.__dict__[name] == sig.__dict__[name]:
> KeyError: 'analysis_id'
> 2007-09-12 11:49:55,170 [avc.ERROR] Plugin Exception plugins.catchall_file
> Traceback (most recent call last):
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 260, in analyze_avc
> report_receiver.report_problem(report)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/server.py", line 145, in report_problem
> self.database.set_filter(self, siginfo.sig, addr, FILTER_ALWAYS)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 468, in set_filter
> siginfo = self.lookup_signature(sig)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/analyze.py", line 388, in lookup_signature
> matches = self.sigs.match_signatures(sig)
> File "/usr/lib/python2.4/site-packages/setroubleshoot/signature.py", line 1265, in match_signatures
> if pat.__dict__[name] == sig.__dict__[name]:
> KeyError: 'analysis_id'
>
>
>
> -jf
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
Please open a bugzilla.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iD8DBQFG5/fJrlYvE4MpobMRAurRAJoCoGozsgM5KlpdpSAQX6eKJWA5VACcCtNd
cjLi2dznbWJlHxaM77RzXbo=
=y7es
-----END PGP SIGNATURE-----
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2007-09-12 14:29 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-09-12 9:54 Centos5 setroubleshoot failure Jan-Frode Myklebust
2007-09-12 14:29 ` Daniel J Walsh [this message]
2007-09-13 7:32 ` Jan-Frode Myklebust
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=46E7F7C9.2040406@redhat.com \
--to=dwalsh@redhat.com \
--cc=SELinux@tycho.nsa.gov \
--cc=janfrode@tanso.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.