Hi,
> I've tried running this through audit2allow but it
doesn't seem to
> resolve it, even after rebooting and relabeling.
>
> # egrep "httpd|perl|munin|crond" /var/log/audit/audit.log | audit2allow -M
mypol
> # semodule -i mypol.pp
>
> These are all related to my recent install of munin. Would
> reinstalling those packages make any difference?
>
> Thanks,
> Alex
Those are regular audit messages and have nothing to do with SELinux.
SELinux message either are type=AVC or type=SELINUX_ERR
Oh :-)
I also ran it with quite a few AVC and SELINUX_ERR messages and it has
had no effect:
type=AVC msg=audit(1299774763.043:2272): avc: denied { getattr } for
pid=3245 comm="httpd" path="/etc/munin/htpasswd.users" dev=sda1
ino=3543833 scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:object_r:munin_etc_t:s0 tclass=file
is this a problem with the policy for munin or my system in general?
Is each package responsible for maintaining their own selinux policy
and installing it at the time the package is installed?
Thanks,
Alex