Permissions on SELinux and Apache modules
During an install of the OpenSSO agent for Apache 2.2 on RedHat Enterprise Linux 5.4 I came across this error message on the /var/log/messages file:
Jan 6 12:04:26 <servername> setroubleshoot: SELinux is preventing the httpd from using potentially mislabeled files /usr/local/apache22_agent/lib/libamapc22.so (usr_t). For complete SELinux messages. run sealert -l 9e764ff8-32b1-441f-bfd1-bc4939f8c73f
To solve this problem you will have to relabel the .so files that you try to load. In my case this was done using this command:
chcon -u system_u -t httpd_exec_t /usr/local/apache22_agent/lib/*
Labels: web


0 Comments:
Post a Comment
Links to this post:
Create a Link
<< Home