If you are running SELinux in enforcing mode then it's possible that your script is
being confined by the certmonger_t domain, which could prevent your file copy from
working.
You can search for AVC denials related to certmonger_t with the command:
# ausearch --interpret --context certmonger_t
If you see output corresponding to the time certmonger ran your script then you're
probably hitting this issue. You can also look at the
The way I solved it was to set things up so that the script runs in the
certmonger_unconfined_t domain, which will allow the script to do anything. The way to do
this is change the file context of the script to certmonger_unconfined_exec_t. I wrote up
some notes about how to do this here:
https://robots.org.uk/CertmongerSELinux
(It would be really handy if this was explained by the official Certmonger
documentation...)
--
Sam Morris <
https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9