Mongodb-server fails to start with selinux enforcing

Daniel J Walsh dwalsh at redhat.com
Wed Nov 19 17:19:26 UTC 2014


On 11/19/2014 09:16 AM, Paul Knox-Kennedy wrote:
> On a clean installation built from
> Fedora-Live-Workstation-x86_64-21_Beta-4.iso, I installed mongodb-server
> but it failed to start due to selinux: "SELinux is preventing mongod
> from name_bind access on the tcp_socket port 27017."
>
> Following the selinux instructions from the journal resolves this:
> # grep mongod /var/log/audit/audit.log | audit2allow -M mypol
> # semodule -i mypol.pp
>
> Should I bugzilla this, and if so, is it against mongodb or
> selinux-policy?
Is this a standard port the mongodb should be listening on? 

The better solution would have been to label the port as a mysql_port_t.

semanage port -a -t mysql_port_t -t tcp 27017
>
>
> NOTICE & DISCLAIMER 
> This email including attachments (this "Document") is confidential and may contain legally privileged information.  If you have received this Document in error please notify the sender immediately and delete this Document from your system without using, copying, disclosing or disseminating it or placing any reliance upon its contents.  We cannot accept liability for any breaches of confidence arising through use of this Document.
>
> The information contained in this Document is provided solely for information purposes on an "as is" basis without warranty of any kind, either express or implied, including without limitation any implied warranty of satisfactory or merchantable quality, fitness for a particular purpose or freedom from error or infringement.  The user relies on the information contained herein, and its accuracy or otherwise, entirely at their own risk.
>
> Any opinions expressed in this Document are those of the author and do not necessarily reflect the opinions of Telsis.  We will not accept responsibility for any commitments made by our employees, agents or representatives outside the scope of our business.
>
>
>
>



More information about the test mailing list