Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Development Quickstart Failing Due to SELinux #57

Closed
damaestro opened this issue Mar 31, 2016 · 2 comments
Closed

Development Quickstart Failing Due to SELinux #57

damaestro opened this issue Mar 31, 2016 · 2 comments

Comments

@damaestro
Copy link

I've followed http://lyft.github.io/confidant/advanced/contributing/#quickstart-for-testing-or-development on Fedora 23 and the application is failing to start due to SELinux:

type=AVC msg=audit(1459447090.791:1040): avc:  denied  { write } for  pid=12660 comm="java" name="dynamo" dev="dm-1" ino=1469994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c563 tcontext=system_u:object_r:mnt_t:s0 tclass=dir permissive=0

The application does start with SELinux permissive. Please consider using auto labeling which has been merged in docker 1.7+. http://www.projectatomic.io/blog/2015/06/using-volumes-with-docker-can-cause-problems-with-selinux/

selinux-policy-targeted-3.13.1-158.11.fc23.noarch
docker-1.9.1-6.git6ec29ef.fc23.x86_64

@damaestro
Copy link
Author

To get things working without SELinux permissive: sudo chcon -Rt svirt_sandbox_file_t /mnt/dynamo

@ryan-lane
Copy link
Contributor

Thanks for the info! I've fixed this via c7ca4e8

tstallings pushed a commit that referenced this issue Aug 2, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants