Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

selinux #3673

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

selinux #3673

wants to merge 1 commit into from

Conversation

idarlund
Copy link

@idarlund idarlund commented Aug 21, 2024

documentation was lacking information on security context to binary which resulted SELinux based distros to deny execution trough service. I've added documentation how to fix this without turning SELinux off.

Closes #3700

add security context to binary
@izanbard
Copy link

Nice work

@idarlund
Copy link
Author

idarlund commented Aug 21, 2024

Just to add some more context to this PR. This is the log message you'll see in the audit log if security context on the binary is not set correctly:

type=AVC msg=audit(1724228637.075:372): avc: denied { execute } for pid=36219 comm="(mediamtx)" name="mediamtx" dev="dm-0" ino=135307595 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=0

@idarlund idarlund changed the title selinux selinux fixes #3700 Aug 27, 2024
@idarlund idarlund changed the title selinux fixes #3700 selinux Aug 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

SELinux is denying service
2 participants