Ankush Grover wrote:
.We are developing a web based application for our client.Now the
problem we are am facing is that,if the SELinux is on means
SELINUX=enforcing and SELINUXTYPE=targeted then
we are not able to run our application whereas If we disable the
SELinux ,we are able to run our application.
We are running our application on Apache with mysql & php.
The logs from /var/log/messages are below:
Logs when SELinux is on
Jul 7 18:01:21 work kernel: audit(1120739481.281:0): avc: denied {
write } for pid=3905 exe=/usr/sbin/httpd name=mysql.sock dev=hda5
ino=96038 scontext=user_u:system_r:httpd_t
tcontext=user_u:object_r:var_lib_t tclass=sock_file
Jul 7 18:01:22 work kernel: audit(1120739482.959:0): avc: denied {
write } for pid=3906 exe=/usr/sbin/httpd name=mysql.sock dev=hda5
ino=96038 scontext=user_u:system_r:httpd_t
tcontext=user_u:object_r:var_lib_t tclass=sock_file
Your mysql socket appears to have the wrong context.
On my system, I get:
# ls -lZ /var/lib/mysql/mysql.sock
srwxrwxrwx mysql mysql system_u:object_r:mysqld_var_run_t
/var/lib/mysql/mysql.sock
You seem to have a context of user_u:object_r:var_lib_t for this.
Or is your mysql.sock not in the /var/lib/mysql directory? If so, why?
Paul.
