[CentOS] Perl - strict.pm not found

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/11/2012 11:47 AM, John Horne wrote:
> On Thu, 2012-10-11 at 11:42 -0400, Daniel J Walsh wrote:
>> On 10/11/2012 06:34 AM, John Horne wrote:
>>> On Wed, 2012-10-10 at 11:38 +0100, John Horne wrote:
>>>> 
>>>> the /etc/cron.daily/freshclam script runs in the early morning, I get
>>>>  sent an email error message:
>>>> 
>>>> ===================================== /etc/cron.daily/freshclam:
>>>> 
>>>> Can't locate strict.pm in @INC (@INC contains:
>>>> /usr/local/lib64/perl5 /usr/local/share/perl5
>>>> /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
>>>> /usr/lib64/perl5 /usr/share/perl5 .) at /usr/local/bin/xymon_event
>>>> line 15. BEGIN failed--compilation aborted at 
>>>> /usr/local/bin/xymon_event line 15. 
>>>> =====================================
>>>> 
>>> Hello,
>>> 
>>> Turns out this is an SELinux issue - the audit.log file shows access to
>>>  strict.pm being denied. As the problem occurs on 6.3, but not on our
>>> 5.8 systems, I have submitted it as a bug to RedHat (#865390) to see
>>> what they say. (We have both CentOS and RedHat 5.8/6.3 servers.)
>>> 
>>> 
>>> 
>>> 
>>> John.
>>> 
>> What is the path to strict.pm?  Do you see any AVC messages?
>> 
> Hello,
> 
> The path is '/usr/share/perl5/strict.pm'.
> 
> The audit.log shows:
> 
> ============================================= type=AVC
> msg=audit(1349922579.929:111741): avc:  denied  { getattr } for pid=29296
> comm="xymon_event" path="/usr/share/perl5/strict.pm" dev=sda1 ino=922261
> scontext=system_u:system_r:freshclam_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:usr_t:s0 tclass=file 
> =============================================
> 
> 
> 
> 
> John.
> 
Yes this should be allowed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlB26xUACgkQrlYvE4MpobMaFwCgqIANrNdoPO4u1CoS6qzQlTGC
4GcAoMfP2Vmz8jyPbeqg42vHNMXt0JCi
=uH3I
-----END PGP SIGNATURE-----