Avc messages about awstats.pl and some mailmain commands

[Stefan Schulze Frielinghaus]

On Tue, 2007-10-30 at 13:32 +0200, Ali Nebi wrote:
[...]
> Oct 21 20:56:58 casamerica kernel: audit(1192993018.053:2785): avc:
> denied  { create } for  pid=3721 comm="awstats.pl"
> scontext=user_u:system_r:httpd_sys_script_t:s0
> tcontext=user_u:system_r:httpd_sys_script_t:s0 tclass=udp_socket
[...]
> What is the best decision to solve these audits? I'm trying to
> understand selinux principles and try to moving the server to enforce
> mode.

You need a policy for Awstats. The latest refpolicy release
(http://oss.tresys.com/files/refpolicy/refpolicy-20070928.tar.bz2)
includes awstats. I guess Fedora 6 doesn't include the latest policy for
awstats.

cheers,
Stefan