On 01/09/2012 04:39 AM, Marcio B. Jr. wrote:
Hi Dominick, thanks for answering.
This is a really unusual situation. So far I cannot explain why but
after re-enabling enforcement for more tests, statement happened to
work just as it did with permissive state.
I've used "semodule -DB" and reproduced issue in both states. Still no
logs. Testing will continue.
Regards,
Make sure auditd is running.
# service auditd status
You should see AVC msgs in /var/log/audit/audit.log or you can use the
ausearch tool
# ausearch -m avc -ts recent
Also you should use a newer version of Fedora which is supported
(Fedora15+).
On Sat, Jan 7, 2012 at 8:01 AM, Dominick Grift<dominick.grift@xxxxxxxxx> wrote:
On Sat, 2012-01-07 at 02:26 -0300, Marcio B. Jr. wrote:
Hi,
I'm incurring some problems with MySQL and SELinux, and I need help.
Running a 64-bit Fedora 12 with mysql-server-5.1.47-2.fc12.x86_64.
$ ps -eZ | grep mysqld
system_u:system_r:mysqld_safe_t:s0 1321 ? 00:00:00 mysqld_safe
system_u:system_r:mysqld_t:s0 1410 ? 00:00:01 mysqld
My problem is:
it is only possible to use "LOAD DATA INFILE" statement if SELinux is
in its permissive state.
This event may have been silently denied.
To reproduce the issue and expose silent denials:
run: semodule -DB
reproduce the issue
see if there is now an AVC denial displayed that is related to your
issue
run: semodule -B
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
Marcio Barbado, Jr.
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
