Re: httpd and mysqld

[Daniel J Walsh <dwalsh redhat com>]

Andrzej Kąkolewski wrote:

> Hello
> I have this selinux warnings:
>
> audit(1118492920.045:0): avc:  denied  { search } for  pid=3285
> exe=/usr/libexec/mysqld name=nscd dev=dm-0 ino=98349
> scontext=user_u:system_r:mysqld_t
> tcontext=system_u:object_r:nscd_var_run_t tclass=dir
>
> audit(1118492923.767:0): avc:  denied  { search } for  pid=3371
> exe=/usr/sbin/httpd name=nscd dev=dm-0 ino=98349
> scontext=user_u:system_r:httpd_t
> tcontext=system_u:object_r:nscd_var_run_t tclass=dir
>
> I did autorelabel but it didn't help.
> What should I do ?
>  
Are you running in permissive mode?  If so please try to duplicate in 
enforcing mode.  AVC messages show up
some times in permissive mode that are prevented in enforcing mode.  We 
are concerned with the enforcing mode
avc messages or any time SELinux prevents legitimate use of an application.

--