Tag Info

New answers tagged

2

You can not attach two different security labels to the same directories. So, you had to select a single label and let the other process to read/write the files with that label. Problem is that doing that you are effectively granting the second process read/write access to the files owned by the first process, which is exactly what you don't want to do. ...


1

You need to set up a selinux policy as described in the documentation Here's the gist: [root@collectd ~]# audit2allow -a #============= httpd_t ============== allow httpd_t collectd_var_lib_t:dir read; allow httpd_t collectd_var_lib_t:file { read getattr open }; (this is the final iteration after running the next commands around 3 times and clicking ...


3

Nginx is being stopped from binding to SELinux pop_port_t ports. It possible is to alter the desired ports to be a type that nginx can bind to, e.g. http_port_t. # for port in {143,993,110,995} ; do semanage port -m -t http_port_t -p tcp $port ; done && semanage port -l -C SELinux Port Type Proto Port Number http_port_t ...


5

You aren't looking at the right directories. Your AVC denials are complaining specifically about the contexts on / and /home respectively, not on any file within them. This makes me suspect that you have more than just those directory entries mislabeled. This is how I would recover: Unmount /home. This is necessary because we want to restore the file ...



Top 50 recent answers are included