SELinux is preventing the httpd_sys_script_t domain from using /dev/log

Solution In Progress - Updated -

Issue

We are using a RewriteMap program for the Apache web server running under the httpd_sys_script_t domain:

RewriteMap token_authorization prg:/custom/bin/apache_token_authorization.sh

The script contains logger lines for logging activity. Unfortunately, SELinux prevents the httpd_sys_script_t domain from use the /dev/log socket:

type=AVC msg=audit(1385112405.781:1073570): avc: denied { write } for pid=347 comm="logger" name="log" dev=devtmpfs ino=106668 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=unconfined_u:object_r:devlog_t:s0 tclass=sock_file

Environment

  • Red Hat Enterprise Linux 6.4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content