SELinux prevents httpd from connecting to 3306

Question

SELinux prevents httpd from connecting to 3306

Closed this issue 10 years ago · 2 comments

When running MySQL remotely, SELinux prevents httpd from connecting to outgoing port 3306. To allow this connection the following command needs to be run

# setsebool -P httpd_can_network_connect_db 1

Do we have a preferred way to manipulate SELinux state in chef, or just run execute?

Answer 1 · 2015-01-15T22:45:16.000Z

Found this cookbook for potential usage: https://github.com/skottler/selinux

Answer 2 · 2015-01-16T16:59:03.000Z

Per @gondoi, this was a mistake in our cloud server images that should be resolved shortly.