Squirrelmail, MySQL-change password and SELinux

[Roger Grosswiler]

Daniel J Walsh schrieb:
> Roger Grosswiler wrote:
> 
>> Hi,
>>
>> tried successfully installing squirrelmail with mysql authentication. 
>> After installting the change_mysql-plugin, i got the following message 
>> in /var/log/messages:
>>
>>> Jan 31 22:21:53 frodo kernel: audit(1107206513.281:0): avc:  denied  
>>> { write } for  pid=12823 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0 
>>> ino=360554 scontext=root:system_r:httpd_t 
>>> tcontext=root:object_r:var_lib_t tclass=sock_file
>>> Jan 31 22:22:07 frodo kernel: audit(1107206527.169:0): avc:  denied  
>>> { write } for  pid=12825 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0 
>>> ino=360554 scontext=root:system_r:httpd_t 
>>> tcontext=root:object_r:var_lib_t tclass=sock_file
>>
>>
>>
>>
>> while squirrel's plugin meant, that the database is busy. If i 
>> understand the above right, selinux didn't let the plugin write the 
>> new password in the mysql-database.
>>
>> What can i do (except disabling selinux)?
>>
> The problem is you do not have the latest policy installed on this 
> machine, and you need to relabel mysql.
> 
> Upgrade to the latest policy via yum
> 
> rpm -q -l mysql-server | restorecon -R -v -f -
> 
> service mysql restart
> 
> Should fix the problem.
> 
>> Thanks,
>> Roger
>>
>> -- 
>> fedora-selinux-list mailing list
>> fedora-selinux-list at redhat.com
>> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
> 
> 
> 
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
Daniel,

I tried, you were right, now it works perfect, thanks a lot!

Roger