On Wed, 2023-09-06 at 10:15 -0700, Samuel Sieb wrote:
On 2023-09-06 03:38, Patrick O'Callaghan wrote:
The swap stuff works (as discussed in an earlier thread), but the Apache restart fails:
Sep 06 08:01:33 Bree systemd[1]: selinux: avc: denied { start } for auid=n/a uid=0 gid=0 path="/usr/lib/systemd/system/httpd.service" cmdline="" function="bus_unit_method_start_> Sep 06 08:01:33 Bree systemctl[201281]: Failed to restart httpd.service: Access denied Sep 06 08:01:33 Bree systemctl[201281]: See system logs and 'systemctl status httpd.service' for details. Sep 06 08:01:33 Bree systemd[1]: hibernate-resume.service: Main process exited, code=exited, status=4/NOPERMISSION However once the system is up and resumed, I can restart it manually with no issues. This looks like an SElinux problem, so what's the solution?
I'm interested in a solution for that as well. Certbot has the same problem when running from cron.
I guess I could use setenforce off/on around the bash command, but it's crude and might leave a security hole.
poc