Is anyone running RT on a box with SELinux (ES4 in my case)?
Everything’s been going peachy until for some reason yesterday
things got mucked up on /dev/log and now apache/RT cannot log
to syslog, which means several functions like merging are currently
inaccessible. Anybody happen to know what the proper context is
for that file? It’s currently: system_u:object_r:devlog_t and the
errors I’m getting are:
Which I cannot do as the necessary tools are not installed
(and the package manager is currently out of commission).
Cambridge Energy Alliance: Save money. Save the planet.
Not all programs are SELinux-aware and so can muck things up a bit
sometimes. When this happens, the best thing to do is to relabel the
filesystem. To do this, execute the following commands:
touch /.autorelabel
reboot
I’ll look into that.
Keep in mind that the reboot may take a while.
If you want to see which files have an incorrect label (according to the
SELinux’ policy), you can run this command:
restorecon -n -R -v /
Already did that on both the problem file (/dev/log) and recursed the fs
(there are a lot of unlabeled files).
For now, I’ve somewhat side-stepped the issue and am logging to a file.
Not wonderful though, especially since Log::Dispatch doesn’t seem to
have support for ‘none’ so if RT emits and emergency message, it won’t
get through to syslog…
Cambridge Energy Alliance: Save money. Save the planet.
Not all programs are SELinux-aware and so can muck things up a bit
sometimes. When this happens, the best thing to do is to relabel
the filesystem. To do this, execute the following commands:
touch /.autorelabel
reboot
Keep in mind that the reboot may take a while.
If you want to see which files have an incorrect label (according
to the SELinux’ policy), you can run this command:
restorecon -n -R -v /
The switches have the following meanings:
-n - Don’t change any file labels. Allows you to see what will be
changed before committing to it (if you use the -v switch)–remove
the switch to relabel the affected files.
-R - Recursive.
-v - Tells “restorecon” to show which files/directories would be
changed and to what context. If you leave this switch out,
restorecon will exit silently.
It’s usually wise to relabel the filesystem when installing any
software that didn’t come with your distribution. This will prevent
problems like these from going unnoticed for too long.
~ Tom
On Nov 10, 2008, at 8:28 AM, Jerrad Pierce wrote:
Is anyone running RT on a box with SELinux (ES4 in my case)?
Everything’s been going peachy until for some reason yesterday
things got mucked up on /dev/log and now apache/RT cannot log
to syslog, which means several functions like merging are currently
inaccessible. Anybody happen to know what the proper context is
for that file? It’s currently: system_u:object_r:devlog_t and the
errors I’m getting are: