SELinux prevent connection clamd_port_t:tcp_socket
MAAN SHARBAJI asked: We have API Server (tomcat) which has clamAV configuration to scan any uploaded file to the system. clamAV configuration will require the API server to connect to …
Allow WordPress upgrades with SELinux in EL8 with nginx/php-fpm
Vinícius Ferrão asked: I’m trying to allow the use of WordPress upgrades (not plugin updates) directly on the web interface. I already have SELinux working for everything except this feature. …
SELinux setting httpd_can_network_relay to on throws error, "could not convert system_u:object_r:systemd_sleep_exec_t:s0 to sid". How is this fixed?
myNewAccount asked: Environment: Digital Ocean Droplet, CentOS 8 The State of httpd_can_network_relay is set to on. However the Default is set to off. $ sudo semanage boolean -l | grep …
Create selinux context for systemd script?
user615862 asked: I’m trying to create a systemd service that executes a custom script I wrote. It is just a backup script that I am using with a systemd timer. …
SELinux : Where I find selinux policy for google-chrome on Fedora Linux?
Cătălin George Feștilă asked: How do I find all the SELinux policies used for Google Chrome on Fedora Linux? My answer: Are you looking for file contexts? A simple grep …
selinux audit rule not logging anything
RedTedRedemption asked: I am trying to audit a directory tree for read, write, and permissions change. I created the rule using auditctl -w <path> -k media-watch, but ausearch -k media-watch …
What is Apache trying to do with port 80 that SELinux is blocking?
David W asked: I have a small web server (CentOS 8) that runs a small php & mysql app. It also runs runs Nagios, BIND, and Postfix running as a …
Centos8: Selinux blocking Samba service from starting
Paul Paku asked: My Samba4 service is being blocked from starting using systemctl. The audit log shows: type=AVC msg=audit(1606428851.446:87): avc: denied { execute } for pid=1748 comm="(samba)" name="samba" dev="dm-0" ino=1462831 …
SELinux blocking Samba access to mounted volume despite samba_share_t
p0lar_bear asked: I repurposed an old AMD A10 APU-based machine that was collecting dust in my basement to act as a NAS, and eventually some other light-duty tech work. It’s …
Changing SELinux file contexts over NFS
Holger asked: I would like to change SELinux labels on a NFS-mounted shared directory. Here is my setup (using virtual machines): I have two machines running CentOS 7. One of …