Re: [CentOS] selinux denial of cgi script with httpd using ssl

On Tue, Sep 5, 2017 at 9:49 AM, Gregory P. Ennis PoMec@pomec.net wrote:

Thanks for your help.

I did pick up an additional entry in the audit file :

type=AVC msg=audit(1504561395.709:10196): avc: denied { execute } for pid=19163 comm="/usr/sbin/httpd" name="s.check.cgi" dev="dm-0" ino=537182029 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file

Unfortunately, I am not sure how the above tells me what is wrong.

Hi,

Have you then tried passing this message though audit2why ?

Maybe read through https://wiki.centos.org/HowTos/SELinux if you haven't already.

If you want something simpler maybe try installing setroubleshoot and setroubleshoot-server.