<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">What I had to do in the past, after installing oracle client is to just run<br><br>restorecon -vR /usr<br><br>This would set the proper lables for oracle libraries and binaries.<br><br>Sincerely yours,<br>
Vadym Chepkov<br><br><br>--- On <b>Tue, 3/30/10, Arian <i><armyofda12mnkeys@gmail.com></i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: Arian <armyofda12mnkeys@gmail.com><br>Subject: selinux and oracle instantclient<br>To: selinux@lists.fedoraproject.org<br>Date: Tuesday, March 30, 2010, 10:17 AM<br><br><div id="yiv831829498">Hello all,<br>I am using Oracle 11.2 instant client on CentOS (which i heard is based a version of Fedora/RedHat), and I was trying to use php's PDO and oci8 modules to test connections to Oracle. <br><br>I had originally gotten a php error about <a rel="nofollow" target="_blank" href="http://pdo_oci.so/oci8.so">pdo_oci.so/oci8.so</a> data execution on a dynamic
link library, libclsh. I asked selinux boards and they said to try 'setsebool -P allow_execstack on'... I think after that change, i still had issues, so they suggested to turn it off temporarily to see if it works...<br>
<br>So I went into /etc/sysconfig/selinux and set:<br>SELINUX=disabled<br>and my script connected and read some rows from the oracle db.<br><br><br>Im not sure if anyone has had issues with oracle client to work with selinux, without turning it off.<br>
I saw a blog stating to run these, but i have no idea if it will work for my version of oracle, or what it does:<br>"tail -f /var/log/audit/audit.log | tee oracle.log<br>
audit2allow -M oracle < oracle.log<br>
semodule -i oracle.pp"<br><br><br>Thanks!,<br>Ari<br>
</div><br>-----Inline Attachment Follows-----<br><br><div class="plainMail">--<br>selinux mailing list<br><a ymailto="mailto:selinux@lists.fedoraproject.org" href="/mc/compose?to=selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a><br><a href="https://admin.fedoraproject.org/mailman/listinfo/selinux" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/selinux</a></div></blockquote></td></tr></table>