Daniel J Walsh schrieb:

Roger Grosswiler wrote:

...

Hi,

tried successfully installing squirrelmail with mysql authentication. After installting the change_mysql-plugin, i got the following message in /var/log/messages:

...

Jan 31 22:21:53 frodo kernel: audit(1107206513.281:0): avc: denied { write } for pid=12823 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0 ino=360554 scontext=root:system_r:httpd_t tcontext=root:object_r:var_lib_t tclass=sock_file Jan 31 22:22:07 frodo kernel: audit(1107206527.169:0): avc: denied { write } for pid=12825 exe=/usr/sbin/httpd name=mysql.sock dev=dm-0 ino=360554 scontext=root:system_r:httpd_t tcontext=root:object_r:var_lib_t tclass=sock_file

while squirrel's plugin meant, that the database is busy. If i understand the above right, selinux didn't let the plugin write the new password in the mysql-database.

What can i do (except disabling selinux)?

The problem is you do not have the latest policy installed on this machine, and you need to relabel mysql.

Upgrade to the latest policy via yum

rpm -q -l mysql-server | restorecon -R -v -f -

service mysql restart

Should fix the problem.

...

Thanks, Roger

-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-selinux-list

-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-selinux-list

Daniel,

Thanks a lot, gonna do a complete update of my system via yum and then try rpm -q -l ...

Roger