postgresql with httpd and dotclear

Nicolas Chauvet kwizart at gmail.com
Tue Feb 5 14:02:45 UTC 2008


Hello !

I try to use apache and postgresql with the dotclear blog engine.
When I try to enter the database information from the admin config
wizard within the browser,  have a selinux denial :

audit(1202182131.382:34): avc:  denied  { name_connect } for  pid=2604
comm="httpd" dest=5432 scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:object_r:postgresql_port_t:s0 tclass=tcp_socket

[root at haderach ~]# ls -Z /home/www/
drwxr-xr-x  root root system_u:object_r:httpd_sys_content_t:s0 dotclear

[root at haderach ~]# rpm -q sepostgresql
sepostgresql-8.2.6-1.158.fc8
selinux-policy-3.0.8-81.fc8
selinux-policy-targeted-3.0.8-81.fc8

[root at haderach data]# semodule -l |grep postgre
sepostgresql    1.158

On the other hand, when i try to use phpPgAdmin, it works. But i need to
change: /var/lib/pgsql/data/pg_hba.conf from ident sameuser to
md5.(tryed the same for dotclear without sucess).

Also, from: http://code.google.com/p/sepgsql/wiki/install_memo_Fedora7
As i'm using F-8, i expect not to need the additional recompiled
selinux-policy-2.6.4-38.sepgsql.fc7.noarch.rpm. (don't know if current
F-7 users will still need it?) - At least the .sepsql doen't fit the
same version number

Any tips for this ?


Nicolas (kwizart)




More information about the fedora-selinux-list mailing list