perfsonar / esmond

A measurement archive for collecting time series metrics from networks.
Other
10 stars 9 forks source link

SElinux context issue for esmond #69

Open laeti-tia opened 7 years ago

laeti-tia commented 7 years ago

I know we ask people to disable SElinux on perfSONAR boxes, but, at least for esmond, there seem to be a quick win by changing ACL on /var/log/esmond to allow apache to write to it.

On a SElinux CentOS-7 server, I had to run this command to have esmond change from returning 500 HTTP errors to working fine:

chcon -R system_u:object_r:httpd_log_t:s0 /var/log/esmond

It might be worth adding that to the RPM spec file (and any Debian build script for that matter).