Kenneth Porter wrote:
> Here's what I'm seeing logged. (Newlines added to make it easier to see
> the log line boundaries with wrapping.) It looks like it's failing to
> traverse the root directory to get to the directory with the content in
> it, but why doesn't it fail on /var/www/html or home directory content,
> which must also do that?
>
> type=AVC msg=audit(1228142052.656:3183659): avc: denied { search } for
> pid=29382 comm="httpd" name="/" dev=cciss/c0d2p1 ino=2
> scontext=user_u:system_r:httpd_t:s0 tcontext=system_u:object_r:file_t:s0
> tclass=dir
Try this:
# grep httpd /var/log/audit/audit.log | audit2why
The output should explain why you are getting the permission denials.
Rick