Solving SELinux Avc Denied Add for Service in CentOS 9
Hi! This Guide Try to Solve SELinux Avc Denial for Service in CentOS 9 GNU/Linux.
And semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
The restorecon command is the most popular and preferred way of modifying the SELinux context of a file or directory.
Finally, this Setup is Valid also for All the others Red Hat Linux Based Distros like:
- Red Hat Enterprise Linux
- Oracle Enterprise Linux
- Rocky Linux
- AlmaLinux
Fixing System
Then to Solve SELinux Avc Denied Add for Service in CentOS 9
First, possibly to find the Service Target:journalctl -xe
And again:sudo systemctl status [MYSERVICE]
If it’s running Stop it:sudo systemctl stop [MYSERVICE]
Then run:sudo semanage fcontext -a -t bin_t "[PATH2TARGETSERVICEDIR](/.*)?"
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
And again:restorecon -r -v [PATH2TARGETSERVICEDIR]
The restorecon command is the most popular and preferred way of modifying the SELinux context of a file or directory.
Last, Start it again with:sudo systemctl start [MYSERVICE]
Thanks to: serverfault.com/questions/1032597