[Arm-dev] More SElinux problems - Re: SELinux message

[Robert Moskowitz]

On 12/26/2016 09:23 PM, Robert Moskowitz wrote:
>
>
> On 12/26/2016 07:45 PM, Robert Moskowitz wrote:
>> This is using the CUbieTruck image.
>>
>> When I did the yum update I saw:
>>
>> [   11.948082] SELinux:  Class binder not defined in policy.
>> [   11.953578] SELinux: the above unknown classes and permissions 
>> will be allowed
>>
>> Later, when I was setting up a policy for moving SSH port:
>>
>> # semanage port -a -t ssh_port_t -p tcp 789 <- (not the real number)
>>
>> I again saw:
>>
>> [ 2273.047017] SELinux:  Class binder not defined in policy.
>> [ 2273.052531] SELinux: the above unknown classes and permissions 
>> will be allowed
>>
>> What is going on here?  Is this something that should be 'fixed'?
>
> And again when I set the policy for userdir:
>
> # setsebool -P httpd_enable_homedirs on
> [ 8192.799162] SELinux:  Class binder not defined in policy.
> [ 8192.804646] SELinux: the above unknown classes and permissions will 
> be allowed

Perhaps you have seen my posts on the main Centos list, as I thought I 
had a HTTPD setup problem.  It may be a SELinux problem.

Basically all I am trying to do is set up a personal web server. Just 
some simple servername and admin settings and turning on user_dir.  I 
can access files in the directories, but not produce a directory 
listing.  Here is the access_log, error_log, and audit_log messages:


192.168.160.12 - - [28/Dec/2016:11:59:10 -0500] "GET /~rgm/family/ 
HTTP/1.1" 403 214 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:50.0) 
Gecko/20100101 Firefox/50.0"

[Wed Dec 28 11:59:10.294915 2016] [autoindex:error] [pid 2141] 
(13)Permission denied: [client 192.168.160.12:56456] AH01275: Can't open 
directory for index: /home/rgm/public_html/family/



type=AVC msg=audit(1482944350.289:339): avc:  denied  { read } for 
pid=2141 comm="httpd" name="family" dev="sda3" ino=262199 
scontext=system_u:system_r:httpd_t:s0 
tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=dir 
permissive=0

type=SYSCALL msg=audit(1482944350.289:339): arch=40000028 syscall=322 
per=800000 success=no exit=-13 a0=ffffff9c a1=80657458 a2=a4800 a3=0 
items=0 ppid=2135 pid=2141 auid=4294967295 uid=48 gid=48 euid=48 suid=48 
fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="httpd" 
exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)

type=PROCTITLE msg=audit(1482944350.289:339): 
proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44

I suspect that there is a problem here with SELinux.

Bob