topic Re: Problem in Proxy setting in Operating System - Linux

Problem in Proxy setting

prathap_3 — Wed, 02 Aug 2006 09:38:02 GMT

Hi All,

we are facing a problem here while installing a new proxy.... when we start the squid instance it is failing to start...

in messages the error is generated as follows:

Aug 2 19:55:17 IC-PROXY-03 squid[3769]: Squid Parent: child process 3771 starte
d
Aug 2 19:55:17 IC-PROXY-03 kernel: audit(1154528717.403:0): avc: denied { cre
ate } for pid=3771 exe=/usr/sbin/squid key=3861504 scontext=root:system_r:squid
_t tcontext=root:system_r:squid_t tclass=msgq
Aug 2 19:55:17 IC-PROXY-03 (squid): msgget failed
Aug 2 19:55:17 IC-PROXY-03 squid[3769]: Squid Parent: child process 3771 exited
due to signal 6

please help us in resolving the issue... many thanks in advance...

Regards,
prathap

Re: Problem in Proxy setting

Vipulinux — Wed, 02 Aug 2006 10:15:25 GMT

Hi Prathap

Your SELINUX policy is denying the excution of /usr/sbin/squid

Configure selinux to allow squid.
Or put selinux is warning state.

Cheers
VIpul

Re: Problem in Proxy setting

prathap_3 — Wed, 02 Aug 2006 10:18:46 GMT

Hi,

Could u pls elobarate as i new to LINUX and mine is redhat ES 4

Re: Problem in Proxy setting

g33k — Wed, 02 Aug 2006 10:29:00 GMT

SELinux is NSA project see http://www.nsa.gov/selinux/
there is also documentation.
afaik RH is using SELinux to increase security.