FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora SELinux Support

 
 
LinkBack Thread Tools
 
Old 12-03-2007, 02:46 PM
Daniel J Walsh
 
Default permission issue with bugzilla

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ritesh Trivedi wrote:
> Hi,
>
> After accidental reboot of one of our servers, I started getting avc
> denial messages when bugzilla tries to connect to local mysql
> instance.
>
> At first I was seeing httpd_sys_script_ro_t vs httpd_sys_script_t
> denial messages. I fixed that by issuing chcon httpd_sys_script_rw_t
> on the mysql directory. But now I am seeing unix socket denial error
> (see following...)
>
> Any help will be highly appreciated. Also please reply directly to me
> at this email address if possible.
>
> Nov 26 18:05:09 nbprod2 kernel: audit(1196129109.301:3152): avc:
> denied { connectto } for pid=5900 comm="index.cgi" name="mysql.sock"
> scontext=root:system_r:httpd_sys_script_t:s0
> tcontext=root:system_r:unconfined_t:s0-s0:c0.c255
> tclass=unix_stream_socket
You have mysql running ad unconfined_t? It should be running as
mysql_t, if you execute service mysql restart does it fix the problem?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHVCTPrlYvE4MpobMRAv0EAJ4oO8HfPjfwNEtqRRfzho EyUtY1eQCguBxw
mlf4XXGOKjIfzHwibvVkbQA=
=HfB/
-----END PGP SIGNATURE-----

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
 

Thread Tools




All times are GMT. The time now is 08:11 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org