Re: Apache fails to resume after hibernation

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


On Wed, 2023-09-06 at 10:15 -0700, Samuel Sieb wrote:
> On 2023-09-06 03:38, Patrick O'Callaghan wrote:
> > The swap stuff works (as discussed in an earlier thread), but the
> > Apache restart fails:
> > 
> >     Sep 06 08:01:33 Bree systemd[1]: selinux: avc:  denied  { start
> > } for auid=n/a uid=0 gid=0
> > path="/usr/lib/systemd/system/httpd.service" cmdline=""
> > function="bus_unit_method_start_>
> >     Sep 06 08:01:33 Bree systemctl[201281]: Failed to restart
> > httpd.service: Access denied
> >     Sep 06 08:01:33 Bree systemctl[201281]: See system logs and
> > 'systemctl status httpd.service' for details.
> >     Sep 06 08:01:33 Bree systemd[1]: hibernate-resume.service: Main
> > process exited, code=exited, status=4/NOPERMISSION
> >     
> > However once the system is up and resumed, I can restart it
> > manually
> > with no issues. This looks like an SElinux problem, so what's the
> > solution?
> I'm interested in a solution for that as well.  Certbot has the same 
> problem when running from cron.

Not a solution per se, but a workaround. Instead of restarting Apache
from the service file, I touch a file in /run and keep a small script
checking it every minute (executed from crontab). That seems to work,
but it's a kludge and shouldn't be necessary. I've tried looking into
the proper security context to eliminate the AVC errors, but it's a
real rabbit-hole and I can't be bothered, though there are plenty of
people who seem to report similar problems.

I also reported to BZ the basic problem of Apache not resuming itself
without all this faffing around, but have had no response so far:

users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct:
List Guidelines:
List Archives:
Do not reply to spam, report it:

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux