Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
From: David Johnson <djohnson@schoolcraft.edu>
To: "users@httpd.apache.org" <users@httpd.apache.org>
Thread-Topic: [users@httpd] Error executing script through Apache
Thread-Index: AdEIHfQrvG+fiMfCRket0MBBSeKxBQAIjkMAAAgQQvA=
Date: Fri, 16 Oct 2015 14:37:24 +0000
Message-ID: 
 <CBFB6DF7D5B6C84985281379F11F488B1C13821F@MAILBOX.lv.schoolcraft.cc.mi.us>
References: 
 <CBFB6DF7D5B6C84985281379F11F488B1C1381E3@MAILBOX.lv.schoolcraft.cc.mi.us>
 <20151016142630.GB2174@palma.openstrike.co.uk>
In-Reply-To: <20151016142630.GB2174@palma.openstrike.co.uk>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: RE: [users@httpd] Error executing script through Apache

Hello All

Pete - You were right!

When I try to execute I get this in the audit log.

type=3DAVC msg=3Daudit(1445006093.179:15955): avc:  denied  { write } for  =
pid=3D22733 comm=3D"udt" name=3D"apphome" dev=3Ddm-0 ino=3D23199745 scontex=
t=3Dunconfined_u:system_r:httpd_sys_script_t:s0 tcontext=3Dunconfined_u:obj=
ect_r:default_t:s0 tclass=3Ddir
type=3DSYSCALL msg=3Daudit(1445006093.179:15955): arch=3D40000003 syscall=
=3D5 per=3D400000 success=3Dno exit=3D-13 a0=3Dffeb8bcc a1=3D242 a2=3D1b6 a=
3=3D7 items=3D0 ppid=3D22731 pid=3D22733 auid=3D0 uid=3D800 gid=3D100 euid=
=3D800 suid=3D800 fsuid=3D800 egid=3D100 sgid=3D100 fsgid=3D100 tty=3D(none=
) ses=3D1242 comm=3D"udt" exe=3D"/usr/ud73/bin/udt" subj=3Dunconfined_u:sys=
tem_r:httpd_sys_script_t:s0 key=3D(null)
type=3DAVC msg=3Daudit(1445006093.179:15956): avc:  denied  { append } for =
 pid=3D22733 comm=3D"udt" name=3D"udt.errlog" dev=3Ddm-0 ino=3D64490264 sco=
ntext=3Dunconfined_u:system_r:httpd_sys_script_t:s0 tcontext=3Dunconfined_u=
:object_r:usr_t:s0 tclass=3Dfile
type=3DSYSCALL msg=3Daudit(1445006093.179:15956): arch=3D40000003 syscall=
=3D5 per=3D400000 success=3Dno exit=3D-13 a0=3Dffeb66ac a1=3D441 a2=3D1b6 a=
3=3D83d46a9 items=3D0 ppid=3D22731 pid=3D22733 auid=3D0 uid=3D800 gid=3D100=
 euid=3D800 suid=3D800 fsuid=3D800 egid=3D100 sgid=3D100 fsgid=3D100 tty=3D=
(none) ses=3D1242 comm=3D"udt" exe=3D"/usr/ud73/bin/udt" subj=3Dunconfined_=
u:system_r:httpd_sys_script_t:s0 key=3D(null)
type=3DAVC msg=3Daudit(1445006093.179:15957): avc:  denied  { associate } f=
or  pid=3D22733 comm=3D"udt" key=3D1157629479  scontext=3Dunconfined_u:syst=
em_r:httpd_sys_script_t:s0 tcontext=3Dunconfined_u:unconfined_r:unconfined_=
t:s0-s0:c0.c1023 tclass=3Dshm
type=3DSYSCALL msg=3Daudit(1445006093.179:15957): arch=3D40000003 syscall=
=3D117 per=3D400000 success=3Dno exit=3D-13 a0=3D17 a1=3D45000627 a2=3D0 a3=
=3D0 items=3D0 ppid=3D22731 pid=3D22733 auid=3D0 uid=3D800 gid=3D100 euid=
=3D800 suid=3D800 fsuid=3D800 egid=3D100 sgid=3D100 fsgid=3D100 tty=3D(none=
) ses=3D1242 comm=3D"udt" exe=3D"/usr/ud73/bin/udt" subj=3Dunconfined_u:sys=
tem_r:httpd_sys_script_t:s0 key=3D(null)


Please forgive my ignorance, but what can I do now to resolve this?

Thank you,
David C. Johnson

David C.Johnson=A0
Schoolcraft College
Administrative Systems
Senior Systems Administrator
A-180
1(734)462-4716
djohnson@schoolcraft.edu

-----Original Message-----
From: Pete Houston [mailto:ph1@openstrike.co.uk]=20
Sent: Friday, October 16, 2015 10:27 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] Error executing script through Apache

On Fri, Oct 16, 2015 at 02:21:45PM +0000, David Johnson wrote:
> What would be different about being logged in as www at the command line =
and calling a script vs. running Apache as www and calling it through the i=
ntranet?

The SELinux context will be different. Check the audit log to see if it's b=
eing denied.

Pete
--
Openstrike - improving business through open source http://www.openstrike.c=
o.uk/ or call 01722 770036

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org