Summary: SELinux is preventing access to files with the label, file_t. Detailed Description: [SELinux is in permissive mode. This access was not denied.] SELinux permission checks on files labeled file_t are being denied. file_t is the context the SELinux kernel gives to files that do not have a label. This indicates a serious labeling problem. No files on an SELinux box should ever be labeled file_t. If you have just added a new disk drive to the system you can relabel it using the restorecon command. Otherwise you should relabel the entire file system. Allowing Access: You can execute the following command as root to relabel your computer system: "touch /.autorelabel; reboot" Additional Information: Source Context unconfined_u:system_r:mysqld_t:s0 Target Context system_u:object_r:file_t:s0 Target Objects webissues [ dir ] Source mysqld Source Path /usr/libexec/mysqld Port <Unknown> Host (removed) Source RPM Packages mysql-server-5.1.39-4.fc12 Target RPM Packages Policy RPM selinux-policy-3.6.32-49.fc12 Selinux Enabled True Policy Type targeted Enforcing Mode Permissive Plugin Name file Host Name (removed) Platform Linux (removed) 2.6.31.6-145.fc12.x86_64 #1 SMP Sat Nov 21 15:57:45 EST 2009 x86_64 x86_64 Alert Count 2 First Seen Sat 05 Dec 2009 04:44:17 PM CET Last Seen Sat 05 Dec 2009 04:44:17 PM CET Local ID 6abfb2fa-ae61-4952-959d-b1bd300bb372 Line Numbers Raw Audit Messages node=(removed) type=AVC msg=audit(1260027857.958:78): avc: denied { read } for pid=3960 comm="mysqld" name="webissues" dev=sda2 ino=801034 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir node=(removed) type=AVC msg=audit(1260027857.958:78): avc: denied { open } for pid=3960 comm="mysqld" name="webissues" dev=sda2 ino=801034 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir node=(removed) type=SYSCALL msg=audit(1260027857.958:78): arch=c000003e syscall=2 success=yes exit=26 a0=7f22b020f2a0 a1=90800 a2=0 a3=73 items=0 ppid=3134 pid=3960 auid=500 uid=27 gid=479 euid=27 suid=27 fsuid=27 egid=479 sgid=479 fsgid=479 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null) Hash String generated from selinux-policy-3.6.32-49.fc12,file,mysqld,mysqld_t,file_t,dir,read audit2allow suggests: #============= mysqld_t ============== allow mysqld_t file_t:dir { read open };
*** This bug has been marked as a duplicate of bug 537613 ***