Linux

4.3 SELinux
4.8
Forbidden
root /var/log/audit/audit.log httpd(httpd_t)
(user_home_dir_t)
[root@server ~]# tail /var/log/audit/audit.log
type=AVC msg=audit(1421241819.317:804): avc: denied { search } for pid=7357 co
mm="httpd" name="sato" dev=dm-2 ino=130305 scontext=unconfined_u:system_r:
httpd_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir
type=SYSCALL msg=audit(1421241819.317:804): arch=c000003e syscall=4 success=
no exit=-13 a0=7f7f0adf26e8 a1=7fff803d37c0 a2=7fff803d37c0
a3=1999999999999999 items=0 ppid=7352 pid=7357 auid=0 uid=48 gid=48 eui
d=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=87 comm="htt
pd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null)
type=AVC msg=audit(1421241819.317:805): avc: denied { getattr
} for pid=7357 comm="httpd" path="/home/sato" dev=dm-2 ino=130305 scontext=u
nconfined_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:
user_home_dir_t:s0 tclass=dir
type=SYSCALL msg=audit(1421241819.317:805): arch=c000003e syscall=6 success=
no exit=-13 a0=7f7f0adf2798 a1=7fff803d37c0 a2=7fff803d37c0 a3=1 items=0 p
www.lpi.or.jp 124 (C) LPI-Japan