Uploaded image for project: 'JBoss Web Server'
  1. JBoss Web Server
  2. JWS-818

SELinux denies name_connect to mysql_port_t for tomcat_t

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • JWS 5.0_RHEL DR1
    • JWS 3.1.0 GA
    • selinux, tomcat
    • None

      +++ This bug was initially created as a clone of Bug #1491747 +++
      SELinux is denying tomcat from connecting to MySQL or MariaDB on port 3306, with the following AVC denial in the audit log:

      type=AVC msg=audit(1505399902.845:357696): avc:  denied  { name_connect } for  pid=1168 comm="java" dest=3306 scontext=system_u:system_r:tomcat_t:s0 tcontext=system_u:object_r:mysqld_port_t:s0 tclass=tcp_socket
      

      This worked without issue previously. This is likely the same problem as https://bugzilla.redhat.com/show_bug.cgi?id=1484572 , which reported this for MSSQL, but I'm not sure if that bug's fix will cover this, so I'm reporting here. Feel free to close this as a duplicate if appropriate.

      Version of the SELinux policy RPMs is 3.13.1-166.el7_4.4

              rhn-support-csutherl Coty Sutherland
              rhn-support-csutherl Coty Sutherland
              Jan Onderka Jan Onderka
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: