Another problem with "avc: denied" messages

[Ian Leonard <ian smallworld cx>]

Hi,

I have a web app that will create xml files. It has been running for a 
while now but has suddenly started giving errors as per below (I guess a 
maintenance update did it).

audit(1193660948.194:421): avc:  denied  { write } for  pid=3358 
comm="eco_upload.cgi" name="2007-10.xml" dev=dm-0 ino=58753075 
scontext=system_u:system_r:httpd_t:s0 
tcontext=user_u:object_r:var_lib_t:s0 tclass=file

My minimal selinux knowledge has allowed me to fix the problem with the 
file, but a new files is created once a month. I am guessing that next 
month I will have the same problem.

I guess I need to do something to the cgi script to allow it to create 
the files.


Any advice appreciated.

--
Ian Leonard

Please ignore spelling and punctuation - I did.