[CentOS] java permission denied

Mon Aug 15 10:08:54 UTC 2011
Daniel J Walsh <dwalsh at redhat.com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/13/2011 12:24 PM, Tim Dunphy wrote:
> Hey Barry,
> 
> That's good to know. Thank you again!
> 
> tim
> 
> ----- Original Message ----- From: "Barry Brimer" <lists at brimer.org> 
> To: "CentOS mailing list" <centos at centos.org> Sent: Saturday, August
> 13, 2011 12:05:08 PM Subject: Re: [CentOS] java permission denied
> 
> On Sat, 13 Aug 2011, Tim Dunphy wrote:
> 
>> actually i replied to the wrong thread. D'OH! But it seems that
>> SELinux was behind each problem..
>> 
>> setenforce 0 on that machine allowed it to work. Tho I readily
>> admit that I wish I was more familiar with SELinux. :)
> 
> You can use audit2allow to create SELinux policy for whatever is not
>  working.  I'd hate for you to disable SELinux altogether because of
> a few issues.
> 
> Barry _______________________________________________ CentOS mailing
> list CentOS at centos.org 
> http://lists.centos.org/mailman/listinfo/centos 
> _______________________________________________ CentOS mailing list 
> CentOS at centos.org http://lists.centos.org/mailman/listinfo/centos
Most likely you have a labeling problem and sure make sure your labeling
is good.

fixfiles restore

Should fix the labels.  Just adding rules via audit2allow should  be
handled carefully since you are just allowing any access including
potentially bad access.

http://danwalsh.livejournal.com/30837.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5I8DYACgkQrlYvE4MpobPPsQCgnaAlGVWOZlC2mjqmAJI8GeBb
/bMAoK6SLkhuerIGBYhZpFp/0J1avTw9
=9dzB
-----END PGP SIGNATURE-----