• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue SELinux blocks access to SSH and Plesk Apache & nginx Settings

JohnnyU

Basic Pleskian
Hi,

I enabled SELinux and set it to enforcing but after the restart it blocked my ssh access as root and even blocks my access to the Apache * nginx settings in Plesk.
Is this 'normal'?
 
If I recall correctly, by default, SELinux will block root access via SSH (and for good reasons since you technically should not be using root over SSH, you should be using a normal user account and sudo into doing whatever.

As for Apache and Nginx settings, you'll need to look through the logs to see what's happening. You could look in /var/log/messages and a few other logs to see what's happening. It could be related to this article: SELinux is preventing php-fpm from using the block_suspend capability - Support Cases from Plesk Knowledge Base
 
Thank you for answering this, so if I understand correctly I need to add another user to linux then enable SELinux.
Is it possible to create this user from Plesk or you have to do it directly on linux using the original root user?
 
And is it explained anywhere in Plesk documentation what other things SELinux would block, interfere with if activated?
 
And is it explained anywhere in Plesk documentation what other things SELinux would block, interfere with if activated?
SELinux is not a part of Plesk, so Plesk is not the right contact where to search for an SELinux documentation. Instead, please turn to the SELinux man pages or many articles that can be found on Google on it to check what it does and how it can be configured.
 
For the newer OSes, Plesk and SELinux works without any noticeable issues.

Have you tried to run this command?
# ./usr/local/psa/etc/selinux_policy_upgrade_trigger

Did you see any SELinux-related warnings in the system log?
# grep -i selinux /var/log/messages
 
Back
Top