Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: SElinux and Kwiki: not done yet
https://bugzilla.redhat.com/show_bug.cgi?id=479101
Summary: SElinux and Kwiki: not done yet
Product: Fedora
Version: 10
Platform: All
OS/Version: Linux
Status: NEW
Severity: medium
Priority: low
Component: perl-Kwiki
AssignedTo: steve(a)silug.org
ReportedBy: kernel(a)pkts.ca
QAContact: extras-qa(a)fedoraproject.org
CC: steve(a)silug.org, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Description of problem:
I've installed perl-Kwiki-0.39-3.fc9.noarch and found that it only works when I
type 'setenforce 0'. This indicates that the package has not been
selinux-ified yet.
Version-Release number of selected component (if applicable):
perl-Kwiki-0.39-3.fc9.noarch
How reproducible:
Always
Steps to Reproduce:
1. Install perl-Kwiki and all related perl-Kwiki-* modules.
2. cd /var/www/html
3. kwiki -new kwiki
4. access it
Actual results:
Permission denied.
type=AVC msg=audit(1231312115.429:446): avc: denied { create } for pid=14831
comm="index.cgi" name="pGk5VmnoH1"
scontext=unconfined_u:system_r:httpd_t:s0
tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file
type=AVC msg=audit(1231312115.429:446): avc: denied { write } for pid=14831
comm="index.cgi" name="pGk5VmnoH1" dev=dm-0 ino=3883227
scontext=unconfined_u:system_r:httpd_t:s0
tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file
type=SYSCALL msg=audit(1231312115.429:446): arch=40000003 syscall=5 success=yes
exit=28 a0=9a8b03c a1=280c2 a2=180 a3=280c2 items=0 ppid=14470 pid=14831 auid=0
uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none)
ses=2 comm="index.cgi" exe="/usr/bin/perl"
subj=unconfined_u:system_r:httpd_t:s0 key=(null)
type=AVC msg=audit(1231312115.430:447): avc: denied { setattr } for
pid=14831 comm="index.cgi" name="pGk5VmnoH1" dev=dm-0 ino=3883227
scontext=unconfined_u:system_r:httpd_t:s0
tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file
type=SYSCALL msg=audit(1231312115.430:447): arch=40000003 syscall=15
success=yes exit=0 a0=9a8ac1c a1=180 a2=d5f5ec a3=9a8ac1c items=0 ppid=14470
pid=14831 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48
fsgid=48 tty=(none) ses=2 comm="index.cgi" exe="/usr/bin/perl"
subj=unconfined_u:system_r:httpd_t:s0 key=(null)
type=AVC msg=audit(1231312115.431:448): avc: denied { rename } for pid=14831
comm="index.cgi" name="pGk5VmnoH1" dev=dm-0 ino=3883227
scontext=unconfined_u:system_r:httpd_t:s0
tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file
type=SYSCALL msg=audit(1231312115.431:448): arch=40000003 syscall=38
success=yes exit=0 a0=9a8b114 a1=99d6b7c a2=d5f5ec a3=926c008 items=0
ppid=14470 pid=14831 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48
sgid=48 fsgid=48 tty=(none) ses=2 comm="index.cgi"
exe="/usr/bin/perl"
subj=unconfined_u:system_r:httpd_t:s0 key=(null)
Expected results:
Not permission denied.
Additional info:
--
Configure bugmail:
https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.