Package: ikiwiki
Version: 3.20100815.7
Severity: normal

Dear ikiwiki folks,


using SELinux on Debian Squeeze (in enforcing mode), the Web interface
of ikiwiki does not work as expected.

SELinux claims that ikiwiki tries to search the home directories. There
are several ikiwiki instances on this system but I am pretty sure that
in no configuration file a home directory is listed. But not knowing the
source I do not know. Is `CGI.pm` the source for `ikiwiki.cgi`?

On Tue, 2011-07-12 at 17:03 +0200, Paul Menzel wrote:

>         $ sudo cat /var/log/audit/audit.log | audit2allow -l -m local
>         
>         #============= httpd_sys_script_t ==============
>         allow httpd_sys_script_t devlog_t:sock_file getattr;
>         allow httpd_sys_script_t net_conf_t:file getattr;
>         allow httpd_sys_script_t user_home_dir_t:dir search;

I will post a link to the SELinux archive [1] once their archive is fixed.

Has someone written a SELinux policy for ikiwiki already to fix the
other problem? I could not find anything. This should probably a
separate report against some SELinux package.


Thanks,

Paul


[1] http://www.nsa.gov/research/selinux/list-archive/index.shtml

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to