Issue Roundcube permission denied caused by SELinux

[Visnet]

Server operating system version

AlmaLinux 9.5

Plesk version and microupdate number

18.0.67.2

I found that after having updated to Plesk Obsidian 18.0.67 (and now to the latest 67 Update 2 as well), Roundcube webmail is showing:

Oops... something went wrong!​

An internal error has occurred. Your request cannot be processed at this time.

For administrators: Please check the application and/or server error logs for more information.

When looking at the Roundcube logs, I noticed:

tail -n1 -f /var/log/plesk-roundcube/errors
[18-Feb-2025 08:51:42 +0000]: <ed2i91dg> DB Error: SQLSTATE[HY000] [2002] Permission denied in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_db.php on line 201 (GET /)

After diagnosing any password issues, I was able to connect from the command line without issues:

# mariadb -h localhost -u roundcube roundcubemail -p
Enter password:
#

Finally, I found that disabling SELinux temporarily resolved the issue:

# setenforce 0

From a discussion with ChatGPT, I found that the SELinux bool for `httpd_can_connect_mysql` is missing:

# getsebool -a | grep httpd | grep 'httpd_can_network_connect_db'
httpd_can_network_connect_db --> on
# getsebool -a | grep httpd | grep 'httpd_can_connect_mysql'
#

This implies an issue with SELinux rules bundled with Roundcube for Plesk, right?

Software used:
Product version: Plesk Obsidian 18.0.67.2
OS version: AlmaLinux 9.5 x86_64
Build date: 2025/02/05 19:00
Revision: f88f36449702f778b1cf43d8886ff00b56f2a1e5

With:
- plesk-roundcube-1.6.9-2.redhat.9+p18.0.67.0+t250115.1634.noarch
- Drop-in MariaDB-server-11.4.5-1.el9.x86_64

 

[Visnet]

The issue seems to be related to using a socket connection, because changing the following line fixes the issue in /usr/share/psa-roundcube/config/config.inc.php (real password redacted):

$config['db_dsnw'] = 'mysql://roundcube:PASSWORD@localhost/roundcubemail';

Changing it as follows supposedly causes it to use a TCP connection:

$config['db_dsnw'] = 'mysql://roundcube:[email protected]/roundcubemail';

This fixes the issue, but will probably get overwritten by a Roudcube update.

 

[Sebahat.hadzhi]

Hello, @Visnet . Could you please confirm if you recent performed an upgrade of MariaDB?