Description of problem: start couchdb SELinux is preventing /usr/lib64/erlang/erts-5.10.4/bin/beam.smp from 'write' accesses on the file local.ini. ***** Plugin catchall (100. confidence) suggests ************************** If sie denken, dass es beam.smp standardmässig erlaubt sein sollte, write Zugriff auf local.ini file zu erhalten. Then sie sollten dies als Fehler melden. Um diesen Zugriff zu erlauben, können Sie ein lokales Richtlinien-Modul erstellen. Do zugriff jetzt erlauben, indem Sie die nachfolgenden Befehle ausführen: # grep beam.smp /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:rabbitmq_beam_t:s0 Target Context system_u:object_r:couchdb_conf_t:s0 Target Objects local.ini [ file ] Source beam.smp Source Path /usr/lib64/erlang/erts-5.10.4/bin/beam.smp Port <Unknown> Host (removed) Source RPM Packages erlang-erts-R16B-03.1.fc20.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-122.fc20.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Host Name (removed) Platform Linux (removed) 3.13.3-201.fc20.x86_64 #1 SMP Fri Feb 14 19:08:32 UTC 2014 x86_64 x86_64 Alert Count 1 First Seen 2014-02-22 21:33:25 CET Last Seen 2014-02-22 21:33:25 CET Local ID 983ef1ac-253f-403d-9171-b214cb691610 Raw Audit Messages type=AVC msg=audit(1393101205.640:478): avc: denied { write } for pid=2909 comm="beam.smp" name="local.ini" dev="sda1" ino=374988 scontext=system_u:system_r:rabbitmq_beam_t:s0 tcontext=system_u:object_r:couchdb_conf_t:s0 tclass=file type=SYSCALL msg=audit(1393101205.640:478): arch=x86_64 syscall=open success=yes exit=EBUSY a0=7f5997d03230 a1=241 a2=1b6 a3=1 items=0 ppid=1 pid=2909 auid=4294967295 uid=990 gid=987 euid=990 suid=990 fsuid=990 egid=987 sgid=987 fsgid=987 ses=4294967295 tty=(none) comm=beam.smp exe=/usr/lib64/erlang/erts-5.10.4/bin/beam.smp subj=system_u:system_r:rabbitmq_beam_t:s0 key=(null) Hash: beam.smp,rabbitmq_beam_t,couchdb_conf_t,file,write Additional info: reporter: libreport-2.1.12 hashmarkername: setroubleshoot kernel: 3.13.3-201.fc20.x86_64 type: libreport
commit ed2c97114f75af89a41f0e4ca375993fffab0938 Author: Miroslav Grepl <mgrepl> Date: Mon Feb 24 11:01:40 2014 +0100 Fix couchdb_manage_files() to allow manage couchdb conf files
*** Bug 1068878 has been marked as a duplicate of this bug. ***
selinux-policy-3.12.1-127.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/FEDORA-2014-2801/selinux-policy-3.12.1-127.fc20
Package selinux-policy-3.12.1-127.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-127.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-2801/selinux-policy-3.12.1-127.fc20 then log in and leave karma (feedback).
selinux-policy-3.12.1-127.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.