store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Sun May 19, 2013 3:37 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 3 posts ] 
Author Message
 Post subject: SELinux denying access to clamd and pyzor
Unread postPosted: Thu Jun 12, 2008 3:53 pm 
Offline
Forum Regular
Forum Regular

Joined: Thu Jan 17, 2008 5:48 pm
Posts: 124
I am getting a number of messages saying that both clamd and pyzor are being denied read access by SELinux.

Is this interfering with the operation of these programs? Should I disable SELinux for these apps?

Thanks much.

--------------------------------------------------------------
CentOS 5
Plesk 8.4.0

From SELinux -l yadayada:

avc: denied { getattr } for comm="pyzor" dev=md2 egid=103 euid=10017
exe="/usr/bin/python" exit=0 fsgid=103 fsuid=10017 gid=0 items=0
path="/var/spool/qscan/.pyzor/servers" pid=14457
scontext=user_u:system_r:pyzor_t:s0 sgid=103 subj=user_u:system_r:pyzor_t:s0
suid=10017 tclass=file tcontext=user_u:object_r:var_spool_t:s0 tty=(none)
uid=10017


Top
 Profile  
 
 Post subject:
Unread postPosted: Thu Jun 12, 2008 6:27 pm 
Online
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7418
Location: earth
I turn SELinux off by default in the ASL kernels. In my professional opinion, its Cargo Cult Security :P

Besides, ASL has a powerful least privilege RBAC thats more secure and powerful that selinux, so really selinux is like grsecurity lite.


Top
 Profile  
 
 Post subject:
Unread postPosted: Thu Jun 12, 2008 6:49 pm 
Offline
Forum Regular
Forum Regular

Joined: Thu Jan 17, 2008 5:48 pm
Posts: 124
scott wrote:
I turn SELinux off by default in the ASL kernels. In my professional opinion, its Cargo Cult Security :P


Thanks Scott, I ended up turning it off since for some reason I had it set to permissive mode - no point then.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 3 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group