Bug 1585328
Summary: | SELinux prevents zoneminder from connecting to remote mysql database | ||||||
---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Orion Poplawski <orion> | ||||
Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> | ||||
Status: | CLOSED ERRATA | QA Contact: | Milos Malik <mmalik> | ||||
Severity: | medium | Docs Contact: | |||||
Priority: | unspecified | ||||||
Version: | 7.5 | CC: | lvrabec, mgrepl, mmalik, plautrba, ssekidde | ||||
Target Milestone: | rc | ||||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2018-10-30 10:05:00 UTC | Type: | Bug | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Orion Poplawski
2018-06-01 21:16:14 UTC
after setting up a camera, ended up with: #============= httpd_t ============== allow httpd_t zoneminder_var_lib_t:lnk_file create; allow httpd_t zoneminder_var_lib_t:sock_file { create unlink }; #============= zoneminder_script_t ============== allow zoneminder_script_t cert_t:dir search; allow zoneminder_script_t httpd_t:unix_dgram_socket sendto; allow zoneminder_script_t mysqld_port_t:tcp_socket name_connect; allow zoneminder_script_t sysfs_t:dir read; allow zoneminder_script_t sysfs_t:file { getattr open read }; allow zoneminder_script_t tmpfs_t:dir { add_name create read remove_name rmdir write }; allow zoneminder_script_t tmpfs_t:file { create getattr open read unlink write }; allow zoneminder_script_t zoneminder_var_lib_t:file { create lock open unlink write }; #============= zoneminder_t ============== allow zoneminder_t fs_t:filesystem getattr; allow zoneminder_t mysqld_port_t:tcp_socket name_connect; allow zoneminder_t rtsp_port_t:tcp_socket name_connect; and enabling nis_enabled. Created attachment 1446874 [details]
audit messages
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:3111 |