[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: can't run logrotate

Subject: Cron <root adama> run-parts /etc/cron.daily
error: cannot open current directory: Permission denied

Looks like a permission problem of cron.daily

No, that's not it. It's failing at this line of source code:

here = open(".", O_RDONLY);

Why wouldn't logrotate be able to open "."? It must be selinux - I am seeing stuff like

type=AVC msg=audit(1226307734.708:7252): avc: denied { read } for pid=32085 comm="logrotate" name="root" dev=dm-0 ino=13028929 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir

type=SYSCALL msg=audit(1226307734.708:7252): arch=40000003 syscall=5 success=no exit=-13 a0=80525d3 a1=8000 a2=0 a3=8000 items=0 ppid=32083 pid=32085 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1164 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null)

I'll try "touch /.autorelabel" and see what happens...

- Mike

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]