FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora User

 
 
LinkBack Thread Tools
 
Old 06-24-2008, 06:48 PM
Claude Jones
 
Default Selinux and awstats

I once had awstats on this machine, but it's been long ago removed. I've had a persistent flood of error messages ever since that I can't seem to find the cause of. They look like this:

/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /var/lib/awstats(/.*)? (system_ubject_r:httpd_sys_script_rw_t:s0 and system_ubject_r:awstats_var_lib_t:s0).
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different specifications for /usr/share/awstats/wwwroot/cgi-bin(/.*)? (system_ubject_r:httpd_sys_script_exec_t:s0 and system_ubject_r:httpd_awstats_script_exec_t:s0).

When booting up, I can get a whole screenful of these things. Every time I run smartpm, I get them. I've tried editing references to awstats out of the indicated files, which seems to work briefly, but then the messages return.
--
Claude Jones

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-24-2008, 08:11 PM
max
 
Default Selinux and awstats

Claude Jones wrote:
I once had awstats on this machine, but it's been long ago
removed. I've had a persistent flood of error messages ever since
that I can't seem to find the cause of. They look like this:



/etc/selinux/targeted/contexts/files/file_contexts: Multiple
different specifications for /var/lib/awstats(/.*)?
(system_ubject_r:httpd_sys_script_rw_t:s0 and
system_ubject_r:awstats_var_lib_t:s0).


When you had it installed did you have to create policy for it or was
there already a policy written for it?
I would guess that these files are getting conflicting labels?contexts?
You might try bouncing this off the fedora-selinux list instead.


/etc/selinux/targeted/contexts/files/file_contexts: Multiple
different specifications for /usr/share/awstats/wwwroot/cgi-
bin(/.*)? (system_ubject_r:httpd_sys_script_exec_t:s0 and
system_ubject_r:httpd_awstats_script_exec_t:s0).



When booting up, I can get a whole screenful of these things.
Every time I run smartpm, I get them. I've tried editing
references to awstats out of the indicated files, which seems to
work briefly, but then the messages return.



--
Fortune favors the *BOLD*

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-25-2008, 11:22 AM
Daniel J Walsh
 
Default Selinux and awstats

max wrote:
> Claude Jones wrote:
>> I once had awstats on this machine, but it's been long ago removed.
>> I've had a persistent flood of error messages ever since that I can't
>> seem to find the cause of. They look like this:
>>
>>
>> /etc/selinux/targeted/contexts/files/file_contexts: Multiple different
>> specifications for /var/lib/awstats(/.*)?
>> (system_ubject_r:httpd_sys_script_rw_t:s0 and
>> system_ubject_r:awstats_var_lib_t:s0).
>
> When you had it installed did you have to create policy for it or was
> there already a policy written for it?
> I would guess that these files are getting conflicting labels?contexts?
> You might try bouncing this off the fedora-selinux list instead.
>
>> /etc/selinux/targeted/contexts/files/file_contexts: Multiple different
>> specifications for /usr/share/awstats/wwwroot/cgi-
>> bin(/.*)? (system_ubject_r:httpd_sys_script_exec_t:s0 and
>> system_ubject_r:httpd_awstats_script_exec_t:s0).
>>
>>
>> When booting up, I can get a whole screenful of these things. Every
>> time I run smartpm, I get them. I've tried editing references to
>> awstats out of the indicated files, which seems to work briefly, but
>> then the messages return.
>
Looks like you might have created a local file context for this library.

Try

# semanage fcontext -d '/var/lib/awstats(/.*)?'

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-27-2008, 02:50 PM
Claude Jones
 
Default Selinux and awstats

> >> When booting up, I can get a whole screenful of these
> >> things. Every time I run smartpm, I get them. I've tried
> >> editing references to awstats out of the indicated files,
> >> which seems to work briefly, but then the messages return.
>
> Looks like you might have created a local file context for
> this library.
>
> Try
>
> # semanage fcontext -d '/var/lib/awstats(/.*)?'

I ran this command, but, the issue is still not solved. I just
got this message while running smart update, for example:

/etc/selinux/targeted/contexts/files/file_contexts: Multiple
different specifications for /usr/share/awstats/wwwroot/cgi-
bin(/.*)? (system_ubject_r:httpd_sys_script_exec_t:s0 and
system_ubject_r:httpd_awstats_script_exec_t:s0).
--
Claude Jones
Levit & James, Inc.
Leesburg, VA
703-771-1549

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-29-2008, 12:38 PM
Daniel J Walsh
 
Default Selinux and awstats

Claude Jones wrote:
>>>> When booting up, I can get a whole screenful of these
>>>> things. Every time I run smartpm, I get them. I've tried
>>>> editing references to awstats out of the indicated files,
>>>> which seems to work briefly, but then the messages return.
>> Looks like you might have created a local file context for
>> this library.
>>
>> Try
>>
>> # semanage fcontext -d '/var/lib/awstats(/.*)?'
>
> I ran this command, but, the issue is still not solved. I just
> got this message while running smart update, for example:
>
> /etc/selinux/targeted/contexts/files/file_contexts: Multiple
> different specifications for /usr/share/awstats/wwwroot/cgi-
> bin(/.*)? (system_ubject_r:httpd_sys_script_exec_t:s0 and
> system_ubject_r:httpd_awstats_script_exec_t:s0).
# grep awstats /etc/selinux/targeted/contexts/files/*
Are the references in file_context or file_context.local?


# semodule -l

Any additional reference to awstats?

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-29-2008, 12:52 PM
Claude Jones
 
Default Selinux and awstats

On Sun June 29 2008, Daniel J Walsh wrote:
> # grep awstats /etc/selinux/targeted/contexts/files/*
> Are the references in file_context or file_context.local?
>
>
> # semodule -l
>
> Any additional reference to awstats?

grep awstats /etc/selinux/targeted/contexts/files/*
/etc/selinux/targeted/contexts/files/file_contexts:/var/lib/awstats(/.*)?
system_ubject_r:awstats_var_lib_t:s0
/etc/selinux/targeted/contexts/files/file_contexts:/usr/share/awstats/tools/.
+.pl -- system_ubject_r:awstats_exec_t:s0
/etc/selinux/targeted/contexts/files/file_contexts:/usr/share/awstats/wwwroot(/.*)?
system_ubject_r:httpd_awstats_content_t:s0
/etc/selinux/targeted/contexts/files/file_contexts:/usr/share/awstats/wwwroot/cgi-
bin(/.*)? system_ubject_r:httpd_awstats_script_exec_t:s0
/etc/selinux/targeted/contexts/files/file_contexts~:/var/lib/awstats(/.*)?
system_ubject_r:awstats_var_lib_t:s0
/etc/selinux/targeted/contexts/files/file_contexts~:/usr/share/awstats/tools/.
+.pl -- system_ubject_r:awstats_exec_t:s0
/etc/selinux/targeted/contexts/files/file_contexts~:/usr/share/awstats/wwwroot(/.*)?
system_ubject_r:httpd_awstats_content_t:s0
/etc/selinux/targeted/contexts/files/file_contexts~:/usr/share/awstats/wwwroot/cgi-
bin(/.*)? system_ubject_r:httpd_awstats_script_exec_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.local:/usr/share/awstats/wwwroot/cgi-
bin(/.*)? system_ubject_r:httpd_sys_script_exec_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.local~:/usr/share/awstats/wwwroot/cgi-
bin(/.*)? system_ubject_r:httpd_sys_script_exec_t:s0
/etc/selinux/targeted/contexts/files/file_contexts.local~:/var/lib/awstats(/.*)?
system_ubject_r:httpd_sys_script_rw_t:s0

[root@vrproductions3 ~]# semodule -l
amavis 1.5.1
amtu 1.1.0
apcupsd 1.3.0
audio_entropy 1.3.0
awstats 1.0.0
etc............
--
Claude Jones
Brunswick, MD, USA

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-30-2008, 12:45 PM
Daniel J Walsh
 
Default Selinux and awstats

Claude Jones wrote:
> On Sun June 29 2008, Daniel J Walsh wrote:
>> # grep awstats /etc/selinux/targeted/contexts/files/*
>> Are the references in file_context or file_context.local?
>>
>>
>> # semodule -l
>>
>> Any additional reference to awstats?
>
> grep awstats /etc/selinux/targeted/contexts/files/*
> /etc/selinux/targeted/contexts/files/file_contexts:/var/lib/awstats(/.*)?
> system_ubject_r:awstats_var_lib_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts:/usr/share/awstats/tools/.
> +.pl -- system_ubject_r:awstats_exec_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts:/usr/share/awstats/wwwroot(/.*)?
> system_ubject_r:httpd_awstats_content_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts:/usr/share/awstats/wwwroot/cgi-
> bin(/.*)? system_ubject_r:httpd_awstats_script_exec_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts~:/var/lib/awstats(/.*)?
> system_ubject_r:awstats_var_lib_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts~:/usr/share/awstats/tools/.
> +.pl -- system_ubject_r:awstats_exec_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts~:/usr/share/awstats/wwwroot(/.*)?
> system_ubject_r:httpd_awstats_content_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts~:/usr/share/awstats/wwwroot/cgi-
> bin(/.*)? system_ubject_r:httpd_awstats_script_exec_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts.local:/usr/share/awstats/wwwroot/cgi-
> bin(/.*)? system_ubject_r:httpd_sys_script_exec_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts.local~:/usr/share/awstats/wwwroot/cgi-
> bin(/.*)? system_ubject_r:httpd_sys_script_exec_t:s0
> /etc/selinux/targeted/contexts/files/file_contexts.local~:/var/lib/awstats(/.*)?
> system_ubject_r:httpd_sys_script_rw_t:s0
>
> [root@vrproductions3 ~]# semodule -l
> amavis 1.5.1
> amtu 1.1.0
> apcupsd 1.3.0
> audio_entropy 1.3.0
> awstats 1.0.0
> etc............
Well you can remove the emacs back up file.

/etc/selinux/targeted/contexts/files/file_contexts.local~

Everything looks fine.

If you execute

matchpathcon /var/lib/awstats

Does it report an error now?

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 06-30-2008, 02:37 PM
Claude Jones
 
Default Selinux and awstats

On Mon June 30 2008, Daniel J Walsh wrote:
>
> Well you can remove the emacs back up file.
>
> /etc/selinux/targeted/contexts/files/file_contexts.local~
>

I did that

> Everything looks fine.
>
> If you execute
>
> matchpathcon /var/lib/awstats
>
> Does it report an error now?

Seems it does:

# matchpathcon /var/lib/awstats
/etc/selinux/targeted/contexts/files/file_contexts: Multiple different
specifications for /usr/share/awstats/wwwroot/cgi-bin(/.*)?
(system_ubject_r:httpd_sys_script_exec_t:s0 and
system_ubject_r:httpd_awstats_script_exec_t:s0).
/var/lib/awstats system_ubject_r:awstats_var_lib_t
--
Claude Jones
Brunswick, MD, USA

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 07-03-2008, 06:14 PM
Daniel J Walsh
 
Default Selinux and awstats

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Claude Jones wrote:
> On Mon June 30 2008, Daniel J Walsh wrote:
>> Well you can remove the emacs back up file.
>>
>> /etc/selinux/targeted/contexts/files/file_contexts.local~
>>
>
> I did that
>
>> Everything looks fine.
>>
>> If you execute
>>
>> matchpathcon /var/lib/awstats
>>
>> Does it report an error now?
>
> Seems it does:
>
> # matchpathcon /var/lib/awstats
> /etc/selinux/targeted/contexts/files/file_contexts: Multiple different
> specifications for /usr/share/awstats/wwwroot/cgi-bin(/.*)?
> (system_ubject_r:httpd_sys_script_exec_t:s0 and
> system_ubject_r:httpd_awstats_script_exec_t:s0).
> /var/lib/awstats system_ubject_r:awstats_var_lib_t


# semanage fcontext -d '/usr/share/awstats/wwwroot/cgi-bin(/.*)?'

Should fix it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkhtFvEACgkQrlYvE4MpobN8FwCgp0y9n2/2LNXEWUjwBpfXM0y0
JUAAoNMDZUcPcz0qwuoTc4xg2j+D1B3r
=R6DT
-----END PGP SIGNATURE-----

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 
Old 07-03-2008, 06:16 PM
Daniel J Walsh
 
Default Selinux and awstats

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Claude Jones wrote:
> On Mon June 30 2008, Daniel J Walsh wrote:
>> Well you can remove the emacs back up file.
>>
>> /etc/selinux/targeted/contexts/files/file_contexts.local~
>>
>
> I did that
>
>> Everything looks fine.
>>
>> If you execute
>>
>> matchpathcon /var/lib/awstats
>>
>> Does it report an error now?
>
> Seems it does:
>
> # matchpathcon /var/lib/awstats
> /etc/selinux/targeted/contexts/files/file_contexts: Multiple different
> specifications for /usr/share/awstats/wwwroot/cgi-bin(/.*)?
> (system_ubject_r:httpd_sys_script_exec_t:s0 and
> system_ubject_r:httpd_awstats_script_exec_t:s0).
> /var/lib/awstats system_ubject_r:awstats_var_lib_t


BTW

# semanage fcontext -l -C

Will show you local customizations to your file context files. These
are changes made either by an administrator or in the postinstall of
some non SELinux-policy rpm file.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkhtF2kACgkQrlYvE4MpobOVAgCaAuqLUb/2f3z2geLBUG4BT8yY
AHcAniO22DBKjL08pVZGfQu5Uw21F4uR
=L3zy
-----END PGP SIGNATURE-----

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
 

Thread Tools




All times are GMT. The time now is 07:29 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org