Hello Luca,

I finally decided to trust that svn ssl cert, even if it is self-signed, 
and found another problem after checking out and compiling ntop 3.3.10 
from svn today...

ntop configured and compiled ok, installed ok... tried to start it... 
problem:

/var/ntop/bin/ntop: error while loading shared libraries: 
/var/ntop/lib/libntopreport-3.3.10.so: cannot restore segment prot after 
reloc: Permission denied

and in log i have this:

#tail -500 /var/log/messages | audit2why
Jan 21 14:13:18 mypc kernel: type=1400 audit(1232539998.498:4): avc:  
denied  { execmod } for  pid=25274 comm="ntop" 
path="/var/ntop/lib/libntopreport-3.3.10.so" dev=sda4 ino=2447514 
scontext=root:unconfined_r:unconfined_t:s0-s0:c0.c255 
tcontext=root:object_r:var_t:s0 tclass=file

        Was caused by:
        The boolean allow_execmod was set incorrectly.
        Description:
        Allow all unconfined executables to use libraries requiring text 
relocation that are not labeled textrel_shlib_t")


this is caused by the install script that doesnt set the selinux context 
as needed.
A quick fix in the command line took care of it, but you might want to 
add it to the install script also:

chcon -t textrel_shlib_t libntopreport-3.3.10.so


Now i can start ntop correctly again.


~~~~
Adi


_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to