fc3 users, 

anybody who tried using squid and squidguard with fc3? i'm having avc
permission denied when i run squid (with squidguard) but squidguard runs
fine on its own if not executed by squid...  

here is an example log entry :

Dec 17 08:45:10 pluto squid: redirect_program /usr/local/bin/squidGuard:
(13) Permission denied
Dec 17 16:45:10 pluto kernel: audit(1103273110.466:0): avc:  denied
{ getattr } for  pid=2632 exe=/usr/sbin/squid
path=/usr/local/bin/squidGuard dev=dm-0 ino=1139124
scontext=root:system_r:squid_t tcontext=system_u:object_r:bin_t
tclass=file

upon inspection of the contexts :

[EMAIL PROTECTED] squidGuard]# ls -aLZ /usr/sbin/squid
-rwxr-xr-x  root     root
system_u:object_r:squid_exec_t   /usr/sbin/squid
[EMAIL PROTECTED] squidGuard]# ls -aLZ /usr/local/bin/squidGuard
-rwxr-xr-x  squid    root
system_u:object_r:bin_t          /usr/local/bin/squidGuard

how do you change the system_u:object_r:bin_t to
system_u:object_r:squid_exec_t ?

will this fix the problem? 




--
Philippine Linux Users' Group (PLUG) Mailing List
[EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to