Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=441378
--- Comment #14 from manuel wolfshant <wolfy(a)nobugconsulting.ro> 2008-08-31
20:20:10 EDT ---
Could you please add to the README.fedora file a couple of lines indicating how
to configure the system to allow for smoketrace usage?
a) the traceroute binary must be suid (chmod u+s ), otherwise the cgi will
display an errror message ("The specified type of tracerouting is allowed for
superuser only") and bail out.
b) selinux might also complain with errors similar to:
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
/bin/traceroute (httpd_t) "net_raw" to <Unknown> (httpd_t). For
complete
SELinux messages. run sealert -l 5e473b24-c127-4c3f-903d-510ead101bec
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
/bin/traceroute (httpd_t) "connect" to <Unknown> (httpd_t). For
complete
SELinux messages. run sealert -l e9b14398-4979-43c9-8ea3-9ca46bae5034
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
/bin/traceroute (httpd_t) "rawip_send" to <Unknown> (node_t). For
complete
SELinux messages. run sealert -l 1185b418-256b-4340-983c-e5a071804fe8
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
/bin/traceroute (httpd_t) "node_bind" to <Unknown> (inaddr_any_node_t).
For complete SELinux messages. run sealert -l
2c034994-cf52-4993-aa97-c6d28bba3562
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
/bin/traceroute (httpd_t) "setopt" to <Unknown> (httpd_t). For
complete
SELinux messages. run sealert -l 3ca926de-8227-4473-81c3-3d50dce61550
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
/bin/traceroute (httpd_t) "read" to <Unknown> (httpd_t). For
complete
SELinux messages. run sealert -l 56c93fca-006d-40e6-88b6-72492f474042
Sep 1 03:11:52 wolfy setroubleshoot: SELinux is preventing
setroubleshootd (httpd_t) "rawip_recv" to <Unknown> (node_t). For
complete
SELinux messages. run sealert -l ab9af5f0-874d-4521-9d2b-3a314af3f8dd
However the selinux messages suddenly disappeared, only that I am not yet sure
what I did to fix...
--
Configure bugmail:
https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.