Thanks for the info. How would I resolve something like this:
kernel: audit(1111420011.093:0): avc: denied { execute } for
pid=23432 path=/usr/local/lib/libsvn_repos-1.so.0.0.0 dev=ida/c0d0p1
ino=107768 scontext=root:system_r:httpd_t tcontext=root:object_r:lib_t
tclass=file
I'm not really clear on what is denying access.
Tom
On Tue, 22 Mar 2005 10:19:27 -0600, Sean Laurent <sean@neuronfarm.com> wrote:
> On Tuesday 22 March 2005 09:53 am, Tom Clancy wrote:
> > Poor form though it is, I'm going to reply to myself in hopes of
> > saving someone else the heartache. This was an issue with SELinux. I
> > resolved it in the short-term by running "setenforce 0" and in the
> > long-term by editing /etc/selinux/config. Probably not how you're
> > supposed to fix it, but it works for now.
>
> SELinux places it's error messages in /var/log/messages. Look for lines that
> say "avc: denied".
>
> For example, here's a line where http was denied access to an SSL certificate
> I created.
>
> Mar 17 18:33:15 tempds1-1 kernel: audit(1111102395.189:0): avc: denied
> { getattr } for pid=8901 exe=/usr/sbin/httpd
> path=/etc/httpd/conf/ssl.crt/server.crt dev=sda8 ino=46506
> scontext=root:system_r:httpd_t tcontext=user_u:object_r:user_home_t
> tclass=file
>
> The exe field tells us the application was httpd and it was trying to access
> the file specified by the path field. The scontext field tells us the
> security context of the application attempting the access, while the tcontext
> field tells us the security context of the file itself.
>
> See if you can find a line related to Subversion, specifically your problem
> loading mod_davn_svn.so or libsvn_repos-1.so.0.
>
> -Sean
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Mar 22 19:09:10 2005