Re: Squirrelmail, MySQL-change password and SELinux
Daniel J Walsh schrieb:
Roger Grosswiler wrote:
> Hi,
>
> tried successfully installing squirrelmail with mysql authentication.
> After installting the change_mysql-plugin, i got the following message
> in /var/log/messages:
>
>> Jan 31 22:21:53 frodo kernel: audit(1107206513.281:0): avc: denied
>> { write } for pid=12823 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0
>> ino=360554 scontext=root:system_r:httpd_t
>> tcontext=root:object_r:var_lib_t tclass=sock_file
>> Jan 31 22:22:07 frodo kernel: audit(1107206527.169:0): avc: denied
>> { write } for pid=12825 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0
>> ino=360554 scontext=root:system_r:httpd_t
>> tcontext=root:object_r:var_lib_t tclass=sock_file
>
>
>
>
> while squirrel's plugin meant, that the database is busy. If i
> understand the above right, selinux didn't let the plugin write the
> new password in the mysql-database.
>
> What can i do (except disabling selinux)?
>
The problem is you do not have the latest policy installed on this
machine, and you need to relabel mysql.
Upgrade to the latest policy via yum
rpm -q -l mysql-server | restorecon -R -v -f -
service mysql restart
Should fix the problem.
> Thanks,
> Roger
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list(a)redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
Daniel,
Thanks a lot,
gonna do a complete update of my system via yum and then try rpm -q -l ...
Roger