Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

selinux denying haproxy connections?

I'm seeing these messages popping up in syslog:

Mar 10 12:51:35 db1 kernel: [5851729.958138] type=1400 audit(1457614295.823:2925931): avc:  denied  { name_connect } for  pid=801 comm="haproxy" dest=7778 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:interwise_port_t:s0 tclass=tcp_socket

Does this mean that SELinux is denying connections to haproxy?

Thanks

like image 303
bluethundr Avatar asked Mar 12 '23 23:03

bluethundr


1 Answers

You could try running:

setsebool -P haproxy_connect_any 1

as root to enable connection for haproxy.

like image 62
user2968675 Avatar answered Apr 27 '23 22:04

user2968675