• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Issue SELinux is preventing

wwwAndries

New Pleskian
Hello,

I found these messages on a CentOS 7.4.1708 server with Plesk Onyx Versie 17.5.3. Do I need to create local policy modules to allow this access?

  • SELinux is preventing /var/cache/parallels_installer/parallels_installer_CentOS_7_x86_64_3.21.2 from unlink access on the file /usr/local/psa/admin/sbin/deployer.
    (Created local policy module because Plesk updates failed)

  • SELinux is preventing /usr/sbin/postalias from getattr access on the file /etc/postfix/main.cf

  • SELinux is preventing /usr/lib64/plesk-9.0/postfix-sendmail-wrapper from 'read, open' accesses on the file /usr/sbin/postalias

  • SELinux is preventing /usr/sbin/postalias from search access on the directory /var/spool/postfix.

  • SELinux is preventing /usr/lib64/plesk-9.0/postfix-sendmail-wrapper from execute_no_trans access on the file /usr/sbin/postalias.

  • SELinux is preventing /usr/sbin/postalias from read access on the file /var/spool/postfix/plesk/aliases.db
 
Reinstall Plesk SELinux policies with:

# yum reinstall psa-selinux
 
I think yes. Our goal is restoring default Plesk policies from psa-selinux package. Your own custom policies you can add later.
 
After "yum reinstall psa-selinux", sealert gives the following messages:

  • SELinux is preventing /usr/sbin/setfiles from getattr access on the file /usr/local/psa/admin/sbin/deployer;58d2c8ee.

  • SELinux is preventing /usr/sbin/setfiles from relabelto access on the file /usr/local/psa/admin/sbin/deployer.

  • SELinux is preventing /usr/sbin/postalias from read access on the file /etc/postfix/main.cf.

‪CentOS Linux 7.4.1708
Plesk Onyx Versie 17.5.3 Update #33

Should I generate local policy modules to allow access?
 
Thanks.

What to do with the last message, "SELinux is preventing /usr/sbin/postalias from read access on the file /etc/postfix/main.cf"?

Can you tell me when I've to generate a local policy module for a "Sealert" message en when not?
 
Back
Top