On 11/19/2014 09:16 AM, Paul Knox-Kennedy wrote:
> On a clean installation built from
> Fedora-Live-Workstation-x86_64-21_Beta-4.iso, I installed mongodb-server
> but it failed to start due to selinux: "SELinux is preventing mongod
> from name_bind access on the tcp_socket port 27017."
>
> Following the selinux instructions from the journal resolves this:
> # grep mongod /var/log/audit/audit.log | audit2allow -M mypol
> # semodule -i mypol.pp
>
> Should I bugzilla this, and if so, is it against mongodb or
> selinux-policy?
Is this a standard port the mongodb should be listening on? 

The better solution would have been to label the port as a mysql_port_t.

semanage port -a -t mysql_port_t -t tcp 27017
>
>
> NOTICE & DISCLAIMER 
> This email including attachments (this "Document") is confidential and may 
> contain legally privileged information.  If you have received this Document 
> in error please notify the sender immediately and delete this Document from 
> your system without using, copying, disclosing or disseminating it or placing 
> any reliance upon its contents.  We cannot accept liability for any breaches 
> of confidence arising through use of this Document.
>
> The information contained in this Document is provided solely for information 
> purposes on an "as is" basis without warranty of any kind, either express or 
> implied, including without limitation any implied warranty of satisfactory or 
> merchantable quality, fitness for a particular purpose or freedom from error 
> or infringement.  The user relies on the information contained herein, and 
> its accuracy or otherwise, entirely at their own risk.
>
> Any opinions expressed in this Document are those of the author and do not 
> necessarily reflect the opinions of Telsis.  We will not accept 
> responsibility for any commitments made by our employees, agents or 
> representatives outside the scope of our business.
>
>
>
>

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe:
https://admin.fedoraproject.org/mailman/listinfo/test

Reply via email to