Squirrelmail, MySQL-change password and SELinux
Roger Grosswiler
roger at gwch.net
Tue Feb 1 06:29:12 UTC 2005
Daniel J Walsh schrieb:
> Roger Grosswiler wrote:
>
>> Hi,
>>
>> tried successfully installing squirrelmail with mysql authentication.
>> After installting the change_mysql-plugin, i got the following message
>> in /var/log/messages:
>>
>>> Jan 31 22:21:53 frodo kernel: audit(1107206513.281:0): avc: denied
>>> { write } for pid=12823 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0
>>> ino=360554 scontext=root:system_r:httpd_t
>>> tcontext=root:object_r:var_lib_t tclass=sock_file
>>> Jan 31 22:22:07 frodo kernel: audit(1107206527.169:0): avc: denied
>>> { write } for pid=12825 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0
>>> ino=360554 scontext=root:system_r:httpd_t
>>> tcontext=root:object_r:var_lib_t tclass=sock_file
>>
>>
>>
>>
>> while squirrel's plugin meant, that the database is busy. If i
>> understand the above right, selinux didn't let the plugin write the
>> new password in the mysql-database.
>>
>> What can i do (except disabling selinux)?
>>
> The problem is you do not have the latest policy installed on this
> machine, and you need to relabel mysql.
>
> Upgrade to the latest policy via yum
>
> rpm -q -l mysql-server | restorecon -R -v -f -
>
> service mysql restart
>
> Should fix the problem.
>
>> Thanks,
>> Roger
>>
>> --
>> fedora-selinux-list mailing list
>> fedora-selinux-list at redhat.com
>> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
>
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
Daniel,
Thanks a lot,
gonna do a complete update of my system via yum and then try rpm -q -l ...
Roger
More information about the fedora-selinux-list
mailing list