Learn about Centmin Mod LEMP Stack today
Become a Member

Question about SELINUX

Discussion in 'Install & Upgrades or Pre-Install Questions' started by Jon Snow, Aug 6, 2023.

  1. Jon Snow

    Jon Snow Active Member

    917
    188
    43
    Jun 30, 2017
    Ratings:
    +293
    Local Time:
    3:46 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    It says in the installation instructions:
    What would happen if this is enabled and centminmod installs?

     
  2. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    4:46 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    SELINUX when enabled, will break Centmin Mod installs and its operation.
    1. Permission Denied Issues: Applications like Nginx, MariaDB, and PHP-FPM might be unable to access specific directories or files due to SELinux's security contexts not being set correctly.
    2. Service Failures: Some services might fail to start if they attempt to bind to network ports or interact with other system resources in a way that SELinux policies do not allow.
     
  3. Jon Snow

    Jon Snow Active Member

    917
    188
    43
    Jun 30, 2017
    Ratings:
    +293
    Local Time:
    3:46 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    Is there anything in centminmod that disables it? I only ever remember disabling it on 2 VPSs I've set up.

    I checked and it's disabled on my current servers. But it was enabled on a new test Linode VPS I spun up just now.
     
  4. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    4:46 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Are you running CentOS 7 or 130.00beta01 with AlmaLinux/RockyLinux 8?

    Centmin Mod can auto disable SELINUX on CentOS 7 if SELINUX is enabled.

    But with AlmaLinux/Rocky Linux 8/9, you can no longer auto disable SELINUX without a server reboot and kernel option change. Centmin Mod 130.00beta01 with private beta for AlmaLinux/RockyLinux 8+ will automatically make the kernel option change to disable SELINUX and prompt user to restart server when you initially run the installer. After restarting server, then you can run private Centmin Mod 130.00beta01's installer to install Centmin Mod on AlmaLinux/RockyLinux 8+.
     
  5. Jon Snow

    Jon Snow Active Member

    917
    188
    43
    Jun 30, 2017
    Ratings:
    +293
    Local Time:
    3:46 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    This explains why then. Thanks!
     
  6. buik

    buik “The best traveler is one without a camera.”

    2,044
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,691
    Local Time:
    8:46 AM