Wednesday, January 06, 2010

Permissions on SELinux and Apache modules

During an install of the OpenSSO agent for Apache 2.2 on RedHat Enterprise Linux 5.4 I came across this error message on the /var/log/messages file:

Jan 6 12:04:26 <servername> setroubleshoot: SELinux is preventing the httpd from using potentially mislabeled files /usr/local/apache22_agent/lib/libamapc22.so (usr_t). For complete SELinux messages. run sealert -l 9e764ff8-32b1-441f-bfd1-bc4939f8c73f

To solve this problem you will have to relabel the .so files that you try to load. In my case this was done using this command:

 chcon -u system_u -t httpd_exec_t /usr/local/apache22_agent/lib/*

Labels:

0 Comments:

Post a Comment

Links to this post:

Create a Link

<< Home