Re: BUG #11365: denied apache cgi connect - Mailing list pgsql-bugs

From Tom Lane
Subject Re: BUG #11365: denied apache cgi connect
Date
Msg-id 6186.1410107784@sss.pgh.pa.us
Whole thread Raw
In response to BUG #11365: denied apache cgi connect  (chenchuanling@msn.com)
Responses Re: BUG #11365: denied apache cgi connect
List pgsql-bugs
chenchuanling@msn.com writes:
> Centos 6.3 integrated 8.4.11 version no problem,but upgrade to version 9.3.5
> apache cgi connection denied.Must be set: setenforce 0, such ability can
> be.

That's not something the PG community can do anything about.  If there's a
bug in the SELinux policy for apache, you need to complain to Red Hat to
get it fixed.

I suspect though that if you dig a little bit, you will find that this
case has been foreseen, and there's a SELinux policy boolean that you
are supposed to set to allow apache processes to do database access.
A quick browse in the output of "semanage boolean -l" suggests that
"allow_user_postgresql_connect" might be the right thing, or maybe
"httpd_can_network_connect_db" ...

            regards, tom lane

pgsql-bugs by date:

Previous
From: chenchuanling@msn.com
Date:
Subject: BUG #11365: denied apache cgi connect
Next
From: Jeff Janes
Date:
Subject: Re: BUG #11365: denied apache cgi connect