Naor Weissmann via FreeIPA-users wrote:
You haven't shared the output for analysis.
>>
Had nothing to share. just two lines:
[Tue Sep 22 13:53:49 2020] [info] Using nickname Server-Cert.
[Tue Sep 22 13:53:49 2020] [error] Certificate not found: 'Server-Cert'
Literally nothing else? That is unexpected.
So /etc/httpd/alias/*.db is at least 0660 root:apache?
>>>
that is correct
# ausearch -m AVC -ts recent
>>>
i have bunch of errors there but i thought selinux in permissive will make sure nothing
is blocked.
for example i have:
: avc: denied { open } for pid=62824 comm="nss_pcache"
name="secmod.db"
will try to resolve those first i guess.
In permissive it should be fine. It could just be bad context, you can
fix with restorecon /etc/httpd/alias/*
rob