On Tue, 2024-09-10 at 13:45 +0100, Barry wrote:
On 10 Sep 2024, at 11:31, Patrick O'Callaghan pocallaghan@gmail.com wrote:
I have a cron line that attempts to restart httpd every morning, but it's failing with an AVC error:
Sep 10 08:00:00 Bree CROND[723189]: (root) CMD ((echo "$(date): Apache: calling restart") >> /var/log/httpd/my-log && /usr/sbin/apachectl restart) Sep 10 08:00:00 Bree systemd[1]: selinux: avc: denied { start } for auid=n/a uid=0 gid=0 path="/usr/lib/systemd/system/httpd.service" cmdline="" function="bus_unit_method_start_generic" scontext=system_u:system_r:httpd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:httpd_unit_file_t:s0 tclass=service permissive=0
My SElinux-fu is not up to this. Any thoughts?
Cannot answer for the selinux, but wonder if systemctl restart httpd would work?
apachectl is just a Shell script that calls on systemctl after massaging some arguments.
Also curious why you need the restart, I have always found httpd to be very reliable.
I suspend my system overnight and resume automatically in the morning, but have found that httpd often fails to resume. Sometimes it does, sometimes it doesn't. I reported this to BZ about a year ago, with a recent update on the report. The restart cron line is an attempt at a workaround.
Note that suspending/resuming the system manually always works, so it's a mystery.
poc