Re: Mongodb-server fails to start with selinux enforcing

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/19/2014 09:16 AM, Paul Knox-Kennedy wrote:
> On a clean installation built from
> Fedora-Live-Workstation-x86_64-21_Beta-4.iso, I installed mongodb-server
> but it failed to start due to selinux: "SELinux is preventing mongod
> from name_bind access on the tcp_socket port 27017."
>
> Following the selinux instructions from the journal resolves this:
> # grep mongod /var/log/audit/audit.log | audit2allow -M mypol
> # semodule -i mypol.pp
>
> Should I bugzilla this, and if so, is it against mongodb or
> selinux-policy?
Is this a standard port the mongodb should be listening on? 

The better solution would have been to label the port as a mysql_port_t.

semanage port -a -t mysql_port_t -t tcp 27017
>
>
> NOTICE & DISCLAIMER 
> This email including attachments (this "Document") is confidential and may contain legally privileged information.  If you have received this Document in error please notify the sender immediately and delete this Document from your system without using, copying, disclosing or disseminating it or placing any reliance upon its contents.  We cannot accept liability for any breaches of confidence arising through use of this Document.
>
> The information contained in this Document is provided solely for information purposes on an "as is" basis without warranty of any kind, either express or implied, including without limitation any implied warranty of satisfactory or merchantable quality, fitness for a particular purpose or freedom from error or infringement.  The user relies on the information contained herein, and its accuracy or otherwise, entirely at their own risk.
>
> Any opinions expressed in this Document are those of the author and do not necessarily reflect the opinions of Telsis.  We will not accept responsibility for any commitments made by our employees, agents or representatives outside the scope of our business.
>
>
>
>

-- 
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test





[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]

  Powered by Linux