Re: SELinux is preventing httpd from create access

[Thomas Mueller <thomas@xxxxxxxxxxxxxx>]

On 11/08/2018 12:41 PM, Mahmood Naderan wrote:

># remove your custom module

>semodule -u my-httpd

[root@sn html]# semodule -u my-httpd
The --upgrade option is deprecated. Use --install instead.
libsemanage.map_file: Unable to open my-httpd
 (No such file or directory).
libsemanage.semanage_direct_install_file: Unable to read file my-httpd
 (No such file or directory).
semodule:  Failed on my-httpd!

sorry, my fault. not -u, its -r (--remove)


# semodule --help
usage:  semodule [option]... MODE...
Manage SELinux policy modules.
MODES:
  -R, --reload            reload policy
  -B, --build            build and reload policy
  -D,--disable_dontaudit    Remove dontaudits from policy
  -i,--install=MODULE_PKG   install a new module
  -r,--remove=MODULE_NAME   remove existing module at desired priority
  -l[KIND],--list-modules[=KIND]  display list of installed modules
     KIND:  standard  list highest priority, enabled modules
            full      list all modules
  -X,--priority=PRIORITY    set priority for following operations (1-999)
  -e,--enable=MODULE_NAME   enable module
  -d,--disable=MODULE_NAME  disable module
  -E,--extract=MODULE_NAME  extract module
Options:
  -s,--store       name of the store to operate on
  -N,-n,--noreload do not reload policy after commit
  -h,--help        print this message and quit
  -v,--verbose     be verbose
  -P,--preserve_tunables    Preserve tunables in policy
  -C,--ignore-module-cache    Rebuild CIL modules compiled from HLL files
  -p,--path        use an alternate path for the policy root
  -S,--store-path  use an alternate path for the policy store root
  -c, --cil extract module as cil. This only affects module extraction.
  -H, --hll extract module as hll. This only affects module extraction.

Regards,
Mahmood

_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx

_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx