Page 1 of 1

Selinux issue not solved after setting boolean

Posted: 2011/11/10 11:38:07
by sikkalgopal
Hi All,

I have installed CentOS6 64bit version with selinux enabled (Enforce mode ). I would like to start mysql service with selinux enabled. In earlier versions of Centos if I run the comamnd, "setsebool -P mysqld_disable_trans=1 allow_user_mysql_connect=1", I can start the mysql.

But in CentOS 6 there are two booleans "allow_user_mysql_connect" and "mysql_connect_any" which are made to off, even mysql is not starting, unless I am setting the selinux to Permissive mode.

Is there any specific command to allow mysql to start, when Selinux is in Enforce mode.

Regards
Gopal

Re: Selinux issue not solved after setting boolean

Posted: 2011/11/14 09:20:16
by TrevorH
MySQL should work out of the box on CentOS 6 with SELinux enabled. So the question is: what changes have you made that are stopping it from working?

Re: Selinux issue not solved after setting boolean

Posted: 2011/11/14 16:48:21
by pschaff
You can see human-readable reasons for denials with[code]audit2why -a[/code]

To generate new policy modules use[code]audit2allow -a -M <policyname>[/code]

If you get not found errors[code]yum install policycoreutils-python[/code]