Re: Nagios Web Interface and SELinux

[Michael Thomas <wart kobold org>]

I've been seeing two other avc denials running nagios on RHEL5.  As far
as I can tell, they don't appear to be causing any problems in the
application itself, and can probably be dontaudit'd:

type=AVC msg=audit(1189631147.313:467272): avc:  denied  { read write }
for  pid=14940 comm="status.cgi" name="[13034671]" dev=sockfs
ino=13034671 scontext=user_u:system_r:nagios_cgi_t:s0
tcontext=user_u:system_r:httpd_t:s0 tclass=tcp_socket

type=AVC msg=audit(1189631147.514:467273): avc:  denied  { read } for
pid=14972 comm="ping" name="nagios.cmd" dev=dm-0 ino=52887564
scontext=user_u:system_r:ping_t:s0
tcontext=user_u:object_r:var_spool_t:s0 tclass=fifo_file

--Wart