Revision as of 22:24, 8 January 2016

Internal

getenforce

If SELinux is enabled, the command will return "Enforcing".

yum provides /usr/sbin/semanage
yum provides sealert

yum -y install policycoreutils-python
yum -y install setroubleshoot-server

If you have a suspicion that SELinux may be at the root of your problems, run:

sealert -a /var/log/audit/audit.log

You may get an output similar to the following one, which helps diagnose the problem:

[...]
SELinux is preventing /usr/sbin/httpd from write access on the file manager.node.nodes.lock.
[...]

Then use audit2allow to parse the audit logs and generate the SELinux policy to allow a denied operation.

grep httpd /var/log/audit/audit.log | audit2allow

The result is similar to:

#============= httpd_t ==============
allow httpd_t httpd_log_t:file write;

@@ Line 45: / Line 45: @@
 </pre>
-The tools also suggest what to do to fix it.
+Then use <tt>audit2allow</tt> to parse the audit logs and generate the SELinux policy to allow a denied operation.
+<pre>
+grep httpd /var/log/audit/audit.log | audit2allow
+</pre>
+The result is similar to:
+<pre>
+#============= httpd_t ==============
+allow httpd_t httpd_log_t:file write;
+</pre>
 ==Permission Denied when Trying to Write in a Directory==
 <font color=red>TODO, rationalize the following content: [[Media_Wiki_Installation#Fails_to_upload_images_with_.27Fatal_exception_of_type_.22MWException.22.27]].</font>