[CentOS] BackupPC 3.1.0 on CentOS 5.2 triggers SE Linux denial

Aleksey Tsalolikhin

atsaloli.tech at gmail.com
Fri Aug 1 00:23:40 UTC 2008


Hi.   I've installed BackupPC 3.1.0 from Testing repository, to Cent
OS 5.2 x86_64, and I am hitting an SE Linux denial - the httpd cannot
talk to the BackupPC socket:

type=AVC msg=audit(07/31/2008 17:18:53.623:410) : avc:  denied  {
connectto } for  pid=11767 comm=httpd
path=/var/log/BackupPC/BackupPC.sock
scontext=user_u:system_r:httpd_t:s0
tcontext=user_u:system_r:initrc_t:s0 tclass=unix_stream_socket

type=AVC msg=audit(07/31/2008 17:18:53.623:410) : avc:  denied  {
write } for  pid=11767 comm=httpd name=BackupPC.sock dev=md0
ino=39813253 scontext=user_u:system_r:httpd_t:s0
tcontext=user_u:object_r:var_log_t:s0 tclass=sock_file

Is there an easy way to fix this, like setting the BackupPC.sock file
universally writeable?  I don't know SE Linux and right now my
objective is to get BackupPC up and running.

I've turned SE Linux off for now, but that's temporary until I get a
more targeted fix.

Thanks,
Aleksey



More information about the CentOS mailing list