httpd can't execute bash?

Jouni Viikari jouni at viikarit.com
Sun May 28 09:43:42 UTC 2006


I have the same problem:

type=AVC msg=audit(1148808793.986:30189): avc:  denied  { execute } for
pid=18644 comm="httpd" name="bash" dev=dm-0 ino=3440979
scontext=user_u:system_r:httpd_t:s0
tcontext=system_u:object_r:shell_exec_t:s0 tclass=file


Not sure which update started it.  Script complaining now used to work
before on FC5.

# getsebool -a | grep http
allow_httpd_anon_write --> off
allow_httpd_sys_script_anon_write --> off
httpd_builtin_scripting --> on
httpd_can_network_connect --> on
httpd_can_network_connect_db --> off
httpd_can_network_relay --> off
httpd_disable_trans --> off
httpd_enable_cgi --> on
httpd_enable_ftp_server --> off
httpd_enable_homedirs --> on
httpd_ssi_exec --> off
httpd_suexec_disable_trans --> off
httpd_tty_comm --> off
httpd_unified --> off

# rpm -qa | grep -i policy
selinux-policy-targeted-2.2.40-1.fc5
checkpolicy-1.30.3-1.fc5
policycoreutils-1.30.8-1.fc5
selinux-policy-2.2.40-1.fc5

-Jouni




More information about the fedora-selinux-list mailing list