On Tue, 2024-09-10 at 13:45 +0100, Barry wrote:
>
> > On 10 Sep 2024, at 11:31, Patrick O'Callaghan <pocallaghan@xxxxxxxxx> wrote:
> >
> > I have a cron line that attempts to restart httpd every morning, but
> > it's failing with an AVC error:
> >
> > Sep 10 08:00:00 Bree CROND[723189]: (root) CMD ((echo "$(date): Apache: calling restart") >> /var/log/httpd/my-log && /usr/sbin/apachectl restart)
> > Sep 10 08:00:00 Bree systemd[1]: selinux: avc: denied { start } for auid=n/a uid=0 gid=0 path="/usr/lib/systemd/system/httpd.service" cmdline="" function="bus_unit_method_start_generic" scontext=system_u:system_r:httpd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:httpd_unit_file_t:s0 tclass=service permissive=0
> >
> > My SElinux-fu is not up to this. Any thoughts?
>
> Cannot answer for the selinux, but wonder if systemctl restart httpd would work?
apachectl is just a Shell script that calls on systemctl after
massaging some arguments.
> Also curious why you need the restart, I have always found httpd to be very reliable.
I suspend my system overnight and resume automatically in the morning,
but have found that httpd often fails to resume. Sometimes it does,
sometimes it doesn't. I reported this to BZ about a year ago, with a
recent update on the report. The restart cron line is an attempt at a
workaround.
Note that suspending/resuming the system manually always works, so it's
a mystery.
poc
--
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
