David Niemi wrote:
On Sun, 2005-10-07 at 12:15 -0400, David Niemi wrote:
I am trying to get squid to run as an accelerator and also do ad zapping
with Cameron Simpson's AdZap routine. I am getting lots of SELinux
errors for the zapping script to be run by squid and also that squid do
something with swap.state and swap log
setting the SELinux protection off for squid still results in the error
about the swap.state and swap log.
so it seems that I need to change something with the SELinux context for
squid and the adzap scripts but have no real idea how to go about. I
tried relabeling but that didn't do it.
< SNIP >
2005/07/10 11:33:21| /var/spool/squid/swap.state: (13) Permission denied
FATAL: storeUfsDirOpenSwapLog: Failed to open swap log.
Squid Cache (Version 2.5.STABLE9): Terminated abnormally.
Some searching with google revealed that the swap.state is not owned by
squid but by root. I did a chown squid:squid /var/spool/squid/swap.state
and now squid starts.
For the AdZap files:
/usr/local/bin/
[root@rhonda bin]# ls -alZ
drwxr-xr-x root root system_u:object_r:bin_t .
drwxr-xr-x root root system_u:object_r:usr_t ..
-rwxr-xr-x root root system_u:object_r:bin_t squid_redirect
-rwxr-xr-x root root system_u:object_r:bin_t wrapzap
Should these be owned by squid also or ?
No
--
