nagios avc

[Vadym Chepkov]

Hi,

I think it's a legitimate access call that needs to be allowed:

type=AVC msg=audit(1256842390.777:50774): avc:  denied  { read } for  pid=17310 comm="httpd" name="status.dat" dev=dm-3 ino=182451 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:nagios_log_t:s0 tclass=file


Sincerely yours,
  Vadym Chepkov

--
fedora-selinux-list mailing list
fedora-selinux-list@...
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Daniel J Walsh]

On 10/29/2009 02:58 PM, Vadym Chepkov wrote:

> Hi,
>
> I think it's a legitimate access call that needs to be allowed:
>
> type=AVC msg=audit(1256842390.777:50774): avc:  denied  { read } for  pid=17310 comm="httpd" name="status.dat" dev=dm-3 ino=182451 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:nagios_log_t:s0 tclass=file
>
>
> Sincerely yours,
>   Vadym Chepkov
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@...
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
>

Apache shares the nagious log data?

--
fedora-selinux-list mailing list
fedora-selinux-list@...
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Vadym Chepkov]

It reads it as a config file

cat  /usr/share/nagios/html/config.inc.php
<?php
//


$cfg['cgi_config_file']='/etc/nagios/cgi.cfg';  // location of the CGI config file

$cfg['cgi_base_url']='/nagios/cgi-bin/';


// FILE LOCATION DEFAULTS
$cfg['main_config_file']='/etc/nagios/nagios.cfg';  // default location of the main Nagios config file
$cfg['status_file']='/var/log/nagios/status.dat'; // default location of Nagios status file
$cfg['state_retention_file']='/var/log/nagios/retention.dat'; // default location of Nagios retention file


Sincerely yours,
  Vadym Chepkov


--- On Thu, 10/29/09, Daniel J Walsh <dwalsh@...> wrote:

> From: Daniel J Walsh <dwalsh@...>
> Subject: Re: nagios avc
> To: "Vadym Chepkov" <chepkov@...>
> Cc: "Fedora SELinux" <fedora-selinux-list@...>
> Date: Thursday, October 29, 2009, 3:31 PM
> On 10/29/2009 02:58 PM, Vadym Chepkov
> wrote:
> > Hi,
> >
> > I think it's a legitimate access call that needs to be
> allowed:
> >
> > type=AVC msg=audit(1256842390.777:50774): avc: 
> denied  { read } for  pid=17310 comm="httpd"
> name="status.dat" dev=dm-3 ino=182451
> scontext=system_u:system_r:httpd_t:s0
> tcontext=system_u:object_r:nagios_log_t:s0 tclass=file
> >
> >
> > Sincerely yours,
> >   Vadym Chepkov
> >
> > --
> > fedora-selinux-list mailing list
> > fedora-selinux-list@...
> > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >
> >
> Apache shares the nagious log data?
>

--
fedora-selinux-list mailing list
fedora-selinux-list@...
https://www.redhat.com/mailman/listinfo/fedora-selinux-list