Not sure what to do with this one... a fix please? ====================================== Summary:
SELinux is preventing sh (awstats_t) "getattr" to / (fs_t).
Detailed Description:
SELinux denied access requested by sh. It is not expected that this access is required by sh and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access.
Allowing Access:
You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against this package.
Additional Information:
Source Context system_u:system_r:awstats_t:s0-s0:c0.c1023 Target Context system_u:object_r:fs_t:s0 Target Objects / [ filesystem ] Source awstats.pl Source Path <Unknown> Port <Unknown> Host bronze.cdkkt.com Source RPM Packages Target RPM Packages filesystem-2.4.13-1.fc9 Policy RPM selinux-policy-3.3.1-74.fc9 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name bronze.cdkkt.com Platform Linux bronze.cdkkt.com 2.6.25.9-76.fc9.i686 #1 SMP Fri Jun 27 16:14:35 EDT 2008 i686 i686 Alert Count 4 First Seen Fri 11 Jul 2008 08:01:08 AM PDT Last Seen Fri 11 Jul 2008 08:01:09 AM PDT Local ID b2a086fa-2d4d-4819-a560-b8f0049272c6 Line Numbers
Raw Audit Messages
host=bronze.cdkkt.com type=AVC msg=audit(1215788469.468:354): avc: denied { getattr } for pid=14761 comm="sh" name="/" dev=sda6 ino=2 scontext=system_u:system_r:awstats_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
selinux@lists.fedoraproject.org