I try to isolate a SELinux problem with nging/munin. I see that error message in "/var/log/nging/error.log":
[crit] 8802#0: *55 connect() to unix:/var/run/munin/fcgi-html.sock failed (13: Permission denied) while connecting to upstream, client: 1.2.3.5, server: , request: "GET /munin/ HTTP/1.1", upstream: "fastcgi://unix:/var/run/munin/fcgi-html.sock:", host: "1.2.3.4"
Then i tried audit2allow to fix selinux permissions:
# cat /var/log/audit/audit.log | audit2allow -M nginx-munin-socket
# semodule -i nginx-munin-socket
The audit.log messages are gone but the nginx socket errors are always there. when i use "setenforce 0" then i have no nginx socket error messages. so i believe that my problem is definitely selinux. But i dont know how to isolate the problem now!?
nginx-munin-socket.te
module nginx-munin-socket 1.0;
require {
type httpd_t;
type init_t;
type munin_var_run_t;
class sock_file write;
class unix_stream_socket connectto;
}
#============= httpd_t ==============
allow httpd_t init_t:unix_stream_socket connectto;
allow httpd_t munin_var_run_t:sock_file write;