Thank you Yong Lee, That's exactly the command that solved the problem. MFC <div>On 6/23/06, Yong Lee <<a href="mailto:ylee@eqo.com">ylee@eqo.com</a> > wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Use the command : ls -laZ to check on the context of the file (probably /var/log/nagios/objects.cache I've got mine set to : user_u:object_r:httpd_sys_content_t you can set it using : chcon user_u:object_r:httpd_sys_content_t <file path> -----Original Message----- From: <a href="mailto:nagios-users-bounces@lists.sourceforge.net">nagios-users-bounces@lists.sourceforge.net</a> [mailto:<a href="mailto:nagios-users-bounces@lists.sourceforge.net">nagios-users-bounces@lists.sourceforge.net </a>] On Behalf Of Chris Stankaitis Sent: June 23, 2006 7:58 AM To: Miguel Fernandes Cc: <a href="mailto:nagios-users@lists.sourceforge.net">nagios-users@lists.sourceforge.net</a> Subject: SPAM Possible: Re: [Nagios-users] SELinux blocking nagios' cgis on FC5 SPAM: -------------------- Anti-Spam Report ---------------------- SPAM: SPAM: YES, score=8.8 threshold=7.2 SPAM: SPAM: Hit! DCC ( 0.0 pts) [Distributed Checksum Score] SPAM: Hit! REFERENCES ( - 0.2 pts)['References' matched '/.+/'] SPAM: Hit! SPFFAIL ( 9.0 pts)['Received-SPF' matched '/^fail /'] SPAM: ----------------- End of Anti-Spam Report ------------------- > audit(1151073510.912 :1650): avc: denied { read } for pid=7942 > comm="status.cgi" name="objects.cache" dev=dm-0 ino=98630 > scontext=root:system_r:httpd_sys_script_t:s0 > tcontext=root:object_r:var_log_t:s0 tclass=file > audit(1151073601.054:1651): avc: denied { read } for pid=7999 > comm="status.cgi" name="objects.cache" dev=dm-0 ino=98630 > scontext=root:system_r:httpd_sys_script_t:s0 > tcontext=root:object_r:var_log_t:s0 tclass=file > audit(1151073696.660:1652): avc: denied { read } for pid=8037 > comm="status.cgi" name="objects.cache" dev=dm-0 ino=98630 > scontext=root:system_r:httpd_sys_script_t:s0 > tcontext=root:object_r:var_log_t:s0 tclass=file > audit(1151073787.393:1653): avc: denied { read } for pid=8067 > comm="status.cgi " name="objects.cache" dev=dm-0 ino=98630 > scontext=root:system_r:httpd_sys_script_t:s0 > tcontext=root:object_r:var_log_t:s0 tclass=file > audit(1151073877.523:1654): avc: denied { read } for pid=8108 > comm="status.cgi" name="objects.cache" dev=dm-0 ino=98630 > scontext=root:system_r:httpd_sys_script_t:s0 > tcontext=root:object_r:var_log_t:s0 tclass=file > audit( 1151073967.653:1655): avc: denied { read } for pid=8203 > comm="status.cgi" name="objects.cache" dev=dm-0 ino=98630 > scontext=root:system_r:httpd_sys_script_t:s0 > tcontext=root:object_r:var_log_t:s0 tclass=file > > what's the context on /var/log/nagios... I am no expert but it looks like status.cgi is not allowed (by SELinux) to read the objects.cache --Chris Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo <a href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642"> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642</a> _______________________________________________ Nagios-users mailing list <a href="mailto:Nagios-users@lists.sourceforge.net"> Nagios-users@lists.sourceforge.net</a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-users">https://lists.sourceforge.net/lists/listinfo/nagios-users</a> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. </blockquote></div>