selinux/dirsrv-admin.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit 51c455e9fcb01b5db2c3708bfcbefd072c944964
Author: Rich Megginson <rmeggins(a)redhat.com>
Date: Tue Apr 6 16:00:48 2010 -0600
SELinux is preventing /usr/lib64/dirsrv/cgi-bin/viewlog "ioctl" access on
udp_socket.
Attempts to run CGI programs such as viewlog cause an SELinux AVC:
SELinux is preventing /usr/lib64/dirsrv/cgi-bin/viewlog "ioctl" access on
udp_socket.
Platforms tested: Fedora 13
Flag Day: no
Doc impact: no
diff --git a/selinux/dirsrv-admin.te b/selinux/dirsrv-admin.te
index 65eda09..f1fd991 100644
--- a/selinux/dirsrv-admin.te
+++ b/selinux/dirsrv-admin.te
@@ -94,7 +94,7 @@ apache_content_template(dirsrvadmin)
allow httpd_dirsrvadmin_script_t self:process { getsched getpgid };
allow httpd_dirsrvadmin_script_t self:capability { setuid net_bind_service setgid chown
sys_nice kill dac_read_search dac_override };
allow httpd_dirsrvadmin_script_t self:tcp_socket { write getopt create read connect bind
getattr setopt accept listen shutdown };
-allow httpd_dirsrvadmin_script_t self:udp_socket { write read create connect getattr };
+allow httpd_dirsrvadmin_script_t self:udp_socket { write read create connect getattr
ioctl };
allow httpd_dirsrvadmin_script_t self:unix_dgram_socket { write create connect };
allow httpd_dirsrvadmin_script_t self:netlink_route_socket { write getattr read bind
create nlmsg_read };
allow httpd_dirsrvadmin_script_t self:sem { write destroy create unix_write setattr };
Show replies by date