Squirrelmail, MySQL-change password and SELinux

[Daniel J Walsh]

Roger Grosswiler wrote:

> Hi,
>
> tried successfully installing squirrelmail with mysql authentication. 
> After installting the change_mysql-plugin, i got the following message 
> in /var/log/messages:
>
>> Jan 31 22:21:53 frodo kernel: audit(1107206513.281:0): avc:  denied  
>> { write } for  pid=12823 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0 
>> ino=360554 scontext=root:system_r:httpd_t 
>> tcontext=root:object_r:var_lib_t tclass=sock_file
>> Jan 31 22:22:07 frodo kernel: audit(1107206527.169:0): avc:  denied  
>> { write } for  pid=12825 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0 
>> ino=360554 scontext=root:system_r:httpd_t 
>> tcontext=root:object_r:var_lib_t tclass=sock_file
>
>
>
> while squirrel's plugin meant, that the database is busy. If i 
> understand the above right, selinux didn't let the plugin write the 
> new password in the mysql-database.
>
> What can i do (except disabling selinux)?
>
The problem is you do not have the latest policy installed on this 
machine, and you need to relabel mysql.

Upgrade to the latest policy via yum

rpm -q -l mysql-server | restorecon -R -v -f -

service mysql restart

Should fix the problem.

> Thanks,
> Roger
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list