nixCraft

Dear All.

Thanks all of you for supporting me.
Now I have another problem with Squid.
I have configured Squid on RHEL 4. It is working fine but sometimes it gets stop inbetween and giving error.

udit(1148384494.732:0): avc: denied { getattr } for pid=7408 exe=/usr/sbin/squid path=/boot dev=hda1 ino=2 scontext=root:system_r:squid_t tcontext=system_ubject_r:boot_t tclass=dir
audit(1148384494.732:0): avc: denied { getattr } for pid=7408 exe=/usr/sbin/squid path=/tmp dev=hda8 ino=2 scontext=root:system_r:squid_t tcontext=system_ubject_r:tmp_t tclass=dir
audit(1148384618.971:0): avc: denied { getattr } for pid=7411 exe=/usr/sbin/squid path=/boot dev=hda1 ino=2 scontext=root:system_r:squid_t tcontext=system_ubject_r:boot_t tclass=dir
audit(1148384618.971:0): avc: denied { getattr } for pid=7411 exe=/usr/sbin/squid path=/tmp dev=hda8 ino=2 scontext=root:system_r:squid_t tcontext=system_ubject_r:tmp_t tclass=dir

Pls help me.

Regards.
Puppen

__________________
someone somewhere is made for you.
LOVE is Journey not a destination.
ALL I want is EVERYTHING.

Run

Try to disable squid SELinux protection for squid daemon under the SELinux Service Protection list.

__________________
Rocky Jr.
You may have my body & soul, but you will never touch my pride!

If you have knowledge, let others light their candles at it.

Certified to work on HP-UX / Sun Solaris / RedHat

Dear Rocky.

Thanks, I have disabled the SElinux for Squid and it is under observation.

regards.

Puppen

__________________
someone somewhere is made for you.
LOVE is Journey not a destination.
ALL I want is EVERYTHING.

On FC6 no command like that? (system-config-securitylevel) but there are command like this system-config-securitylevel-tui

and if I disable this, my transparent proxy doesn't work

What should I do?

Do you need SELinux? If not please disable selinux all together http://www.cyberciti.biz/faq/how-to-...nhanced-linux/

__________________
Vivek | My personal blog
Linux Evangelist
+ ADD [SOLVED] thread prefix to your thread when your problem is sorted out by editing your thread.
+ Always use CODE tags for posting system output and commands!