On 10/28/2016 02:58 PM, Daniel J Walsh wrote:
What AVC's are you seeing?
Plenty of AVC messages in the form:
type=AVC msg=audit(1477853452.023:1338): avc: denied { setattr } for
pid=23456 comm="chown" name="app_model.MYD" dev="dm-0"
ino=10879938
scontext=system_u:system_r:container_t:s0:c140,c877
tcontext=system_u:object_r:container_var_lib_t:s0 tclass=file permissive=0
Where app_model is a specific database table. So by plenty I mean I get
one AVC for each database table of my application (for .MYD|.MYI|.frm)
Or similarly:
sudo docker-compose logs db
db_1 | chown: changing ownership of
`/var/lib/mysql/project/app_name.MYD': Permission denied