It reads it as a config file

cat /usr/share/nagios/html/config.inc.php <?php //

$cfg['cgi_config_file']='/etc/nagios/cgi.cfg'; // location of the CGI config file

$cfg['cgi_base_url']='/nagios/cgi-bin/';

// FILE LOCATION DEFAULTS $cfg['main_config_file']='/etc/nagios/nagios.cfg'; // default location of the main Nagios config file $cfg['status_file']='/var/log/nagios/status.dat'; // default location of Nagios status file $cfg['state_retention_file']='/var/log/nagios/retention.dat'; // default location of Nagios retention file

Sincerely yours, Vadym Chepkov

--- On Thu, 10/29/09, Daniel J Walsh dwalsh@redhat.com wrote:

From: Daniel J Walsh dwalsh@redhat.com Subject: Re: nagios avc To: "Vadym Chepkov" chepkov@yahoo.com Cc: "Fedora SELinux" fedora-selinux-list@redhat.com Date: Thursday, October 29, 2009, 3:31 PM On 10/29/2009 02:58 PM, Vadym Chepkov wrote:

...

Hi,

I think it's a legitimate access call that needs to be

allowed:

...

type=AVC msg=audit(1256842390.777:50774): avc:

denied  { read } for  pid=17310 comm="httpd" name="status.dat" dev=dm-3 ino=182451 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:nagios_log_t:s0 tclass=file

...

Sincerely yours,    Vadym Chepkov

-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Apache shares the nagious log data?