[Bug 222552] Review Request: mailgraph - A RRDtool frontend for Mail statistics

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: mailgraph - A RRDtool frontend for Mail statistics
Alias: mailgraph

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=222552





------- Additional Comments From giallu at gmail.com  2007-01-30 07:03 EST -------
(In reply to comment #18)
> By default SELinux allows apache scripts to be placed only in certain defined
> places. Coud you please copy /usr/share/mailgraph/mailgraph.cgi to
> /var/www/cgi-bin, modify httpd.conf accordingly and retry ?

I copied the cgi and tried to access http://localhost/cgi-bin/mailgraph.cgi (so,
no need for httpd.conf modifications), but then it complains about denied
read/write ops:

type=AVC msg=audit(1170158491.308:592646): avc:  denied  { read } for  pid=1293
comm="mailgraph.cgi" name="mailgraph.rrd" dev=dm-0 ino=279712
scontext=root:system_r:httpd_sys_script_t tcontext=root:object_r:var_lib_t
tclass=file
type=SYSCALL msg=audit(1170158491.308:592646): arch=40000003 syscall=5
success=no exit=-13 a0=8ea0b28 a1=0 a2=1b6 a3=0 items=1 pid=1293 auid=0 uid=48
gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 comm="mailgraph.cgi"
exe="/usr/bin/perl"
type=CWD msg=audit(1170158491.308:592646):  cwd="/var/www/cgi-bin"
type=PATH msg=audit(1170158491.308:592646):
name="/var/lib/mailgraph/mailgraph.rrd" flags=101  inode=279712 dev=fd:00
mode=0100644 ouid=0 ogid=0 rdev=00:00
type=AVC msg=audit(1170158491.527:592647): avc:  denied  { getattr } for 
pid=1296 comm="mailgraph.cgi" name="mailgraph" dev=dm-0 ino=279710
scontext=root:system_r:httpd_sys_script_t tcontext=system_u:object_r:var_t
tclass=dir
type=SYSCALL msg=audit(1170158491.527:592647): arch=40000003 syscall=195
success=no exit=-13 a0=9dd6ac0 a1=9dac0c8 a2=335ff4 a3=9dd6ac0 items=1 pid=1296
auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48
comm="mailgraph.cgi" exe="/usr/bin/perl"
type=AVC_PATH msg=audit(1170158491.527:592647):  path="/var/cache/mailgraph"
type=CWD msg=audit(1170158491.527:592647):  cwd="/var/www/cgi-bin"
type=PATH msg=audit(1170158491.527:592647): name="/var/cache/mailgraph" flags=1
 inode=279710 dev=fd:00 mode=040775 ouid=0 ogid=48 rdev=00:00
type=AVC msg=audit(1170158491.529:592648): avc:  denied  { write } for  pid=1296
comm="mailgraph.cgi" name="mailgraph" dev=dm-0 ino=279710
scontext=root:system_r:httpd_sys_script_t tcontext=system_u:object_r:var_t
tclass=dir
type=SYSCALL msg=audit(1170158491.529:592648): arch=40000003 syscall=39
success=no exit=-13 a0=9dbc540 a1=1ff a2=538c94 a3=9dbc540 items=1 pid=1296
auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48
comm="mailgraph.cgi" exe="/usr/bin/perl"
type=CWD msg=audit(1170158491.529:592648):  cwd="/var/www/cgi-bin"
type=PATH msg=audit(1170158491.529:592648): name="/var/cache/mailgraph/,cgi-bin"
flags=10  inode=279710 dev=fd:00 mode=040775 ouid=0 ogid=48 rdev=00:00



-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.