SELinux blocking Dovecot from mysqld socket

Robert Moskowitz <[email protected]>
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <[email protected]>
I am working with Centos7:

I have configured Dovecot to connect to mysqld via socket:

connect = host=/var/lib/mysql/mysql.sock dbname=postfix user=postfix 
password=Postfix_Database_Password

I test sending a message with

sendmail -i [email protected] < README

This fails with the following message in maillog

Feb  4 11:28:48 klovia dovecot: dict(13122): Error: 
mysql(/var/lib/mysql/mysql.sock): Connect failed to database (postfix): 
Can't connect to local MySQL server through socket 
'/var/lib/mysql/mysql.sock' (13) - waiting for 25 seconds before retry

If I setenforce to 0, the connection works.  So it clearly is an SELinux 
problem.  I worked on this almost 2 years ago on another system and found:

http://zszsit.blogspot.com/2012/12/dovecot-mysql-selinux-issue-on-centos6.html

But I was hoping that there were better tools now with Centos7.  I 
checked for setsebool at:

https://linux.die.net/man/8/mysqld_selinux

and tried:

setsebool -P allow_user_mysql_connect 1

But the mail still does not go unless I setenforce to 0.

Is there someway to get SELinux to allow dovecot (and postfix) to 
connect to mysqld?

thank you

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.