Description of problem: After updating jbcs-httpd from 2.4.37 to 2.4.51, the Webserver not starting giving "SELinux is preventing /opt/rh/jbcs-httpd24/root/usr/sbin/httpd from map access on the chr_file /dev/zero."
Version-Release number of selected component (if applicable):
How reproducible: Update jbcs-httpd from 2.4.37 to 2.4.51 and start httpd service with SE enforcing.
Actual results:
- journalctl -xe:
Okt 27 07:24:33 TestLab7 systemd[1]: Starting The Apache HTTP Server... – Subject: Unit jbcs-httpd24-httpd.service has begun start-up – Defined-By: systemd – Support: [http://lists.freedesktop.org/mailman/listinfo/systemd-devel] – -- Unit jbcs-httpd24-httpd.service has begun starting up. Okt 27 07:24:33 TestLab7 systemd[1]: jbcs-httpd24-httpd.service: main process exited, code=exited, status=1/FAILURE Okt 27 07:24:33 TestLab7 systemd[1]: Failed to start The Apache HTTP Server. – Subject: Unit jbcs-httpd24-httpd.service has failed – Defined-By: systemd – Support: [http://lists.freedesktop.org/mailman/listinfo/systemd-devel] – -- Unit jbcs-httpd24-httpd.service has failed. – -- The result is failed. Okt 27 07:24:33 TestLab7 systemd[1]: Unit jbcs-httpd24-httpd.service entered failed state. Okt 27 07:24:33 TestLab7 systemd[1]: jbcs-httpd24-httpd.service failed. Okt 27 07:24:33 TestLab7 dbus[537]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper) Okt 27 07:24:33 TestLab7 polkitd[531]: Unregistered Authentication Agent for unix-process:3954:146366644 (system bus name :1.273625, object path / Okt 27 07:24:34 TestLab7 dbus[537]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd' Okt 27 07:24:35 TestLab7 setroubleshoot[3979]: failed to retrieve rpm info for /dev/zero Okt 27 07:24:35 TestLab7 postfix/smtpd[3992]: connect from localhost[127.0.0.1] Okt 27 07:24:35 TestLab7 postfix/smtpd[3992]: C56F23338F66: client=localhost[127.0.0.1] Okt 27 07:24:35 TestLab7 postfix/cleanup[3995]: C56F23338F66: message-id=<20221027052435.C56F23338F66@TestLab7> Okt 27 07:24:35 TestLab7 postfix/smtpd[3992]: disconnect from localhost[127.0.0.1] Okt 27 07:24:35 TestLab7 setroubleshoot[3979]: SELinux is preventing /opt/rh/jbcs-httpd24/root/usr/sbin/httpd from map access on the chr_file /dev Okt 27 07:24:35 TestLab7 postfix/qmgr[1354]: C56F23338F66: from=<SELinux_Troubleshoot@TestLab7>, size=3130, nrcpt=1 (queue active) Okt 27 07:24:35 TestLab7 python[3979]: SELinux is preventing /opt/rh/jbcs-httpd24/root/usr/sbin/httpd from map access on the chr_file /dev/zero.
Expected results:
It should work with the update.
Additional info:
It is working when set SE permissive.
- links to