In this exercise, you will troubleshoot SELinux issues preventing a service from starting, as well as functioning correctly.
*This course is not approved or sponsored by Red Hat.*
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Start Apache.
Attempt to start the service:
systemctl start httpdView the status log:
systemctl status httpd -lView recent SELinux errors:
ausearch -m avc -ts recentFind the inode it’s attempting to write to:
find / -inum <inode number>View the SELinux context of the directory/file:
ls -Z /var/log/httpdRestore the proper file context:
restorecon -Rv /var/log/httpd- Resolve SELinux issues preventing viewing web content.
Attempt to view the web content:
curl localhostView recent AVC errors:
ausearch -m avc -ts recentFind the inode of the file/directory:
find / -inum <inode number>View the context of the file/directory:
ls -Z /home/cloud_user/html/index.htmlInstall
sealert:yum -y install setroubleshoot setroubleshoot-serverRestart the
auditdservice:service auditd restartUse
sealertfor more information:sealert -a /var/log/audit/audit.logLookup the
httpd_read_user_contentboolean:getsebool httpd_read_user_contentSet the boolean to permit reading user content:
setsebool -P httpd_read_user_content=1View the web content:
curl localhost
