I have the following error message showing up in my audit logs. This is on an
SELinux-enabled web server (running RHEL ES 4, fully patched). This is actually
an selinux error, so if this not the correct place to ask this question, please
let me know.
**********
type=AVC msg=audit(1185389440.164:7579569): avc: denied { execute } for
pid=26076 comm="aa_pap8" name="ld.so.cache" dev=md3 ino=2529627
scontext=user_u:system_r:httpd_sys_script_t tcontext=root:object_r:ld_so_cache_t
tclass=file
type=SYSCALL msg=audit(1185389440.164:7579569): arch=40000003 syscall=90
per=400000 success=no exit=-13 a0=bffff074 a1=2 a2=a54fd4 a3=3 items=0 pid=26076
auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48
comm="aa_pap8" exe="/location/of/bin/aa_pap8"
type=AVC_PATH msg=audit(1185389440.164:7579569): path="/etc/ld.so.cache"
**********
A web page of ours is calling a script that is calling this program
/location/of/bin/aa_pap8. The security context on the program is
-rwxr-xr-x apache AA system_u:object_r:httpd_sys_content_t aa_pap8
The security context on ls.so.cache is
-rw-r--r-- root root root:object_r:ld_so_cache_t /etc/ld.so.cache
Does anyone know why this error is occurring? The program is running correctly.
I'd just like to know where the error is coming from.
Thanks,
Bill Tangren