Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Not a Bug
-
10.1.16
-
None
-
Centos7 Virtual Machine running Web Application. SELinux is Enabled
Description
I have a web server that was running without any issues until I ran Yum updates which upgraded MariaDB from 10.1.14 to 10.1.16 . After the restart, I noticed MariaDB would not start. Looking at the log file I see this:
2016-08-08 15:04:54 140621397575808 [ERROR] mysqld: File '/home/mdb/keys.enc' not found (Errcode: 13 "Permission denied") |
2016-08-08 15:04:54 140621397575808 [ERROR] Plugin 'file_key_management' init function returned error. |
2016-08-08 15:04:54 140621397575808 [ERROR] Plugin 'file_key_management' registration as a ENCRYPTION failed. |
2016-08-08 15:04:54 140621397575808 [ERROR] InnoDB: cannot enable encryption, encryption plugin is not available |
2016-08-08 15:04:54 140621397575808 [ERROR] Plugin 'InnoDB' init function returned error. |
2016-08-08 15:04:54 140621397575808 [ERROR] Plugin 'InnoDB' registration as a STORAGE ENGINE failed. |
2016-08-08 15:04:54 140621397575808 [Note] Plugin 'FEEDBACK' is disabled. |
2016-08-08 15:04:54 140621397575808 [ERROR] Unknown/unsupported storage engine: InnoDB |
2016-08-08 15:04:54 140621397575808 [ERROR] Aborting |
So first step I tried was updating the permissions of the "/home/mbd/" directory. I tried multiple settings with no luck, such as:
chown -R mysql.mysql /home/mbd/
|
chmod 640 /home/mbd/keys.enc |
I then tried updating SELinux rules, but that did not help:
semanage fcontext -a -t mysqld_db_t "/home/mdb(/.*)?" |
restorecon -Rv /home/mdb
|
Next option I tried was moving the "keys.enc" file to the "/tmp/" directory. Doing this did allow MySQL to start. I however cannot have the "keys.enc" living in the /tmp directory.
cp -p /home/mbd/keys.enc /tmp
|
Does anyone know why this is happening?
Attachments
Issue Links
- is caused by
-
MDEV-10298 Improve systemd service hardening
- Closed
- relates to
-
MDEV-10404 Improved systemd service hardening causes SELinux problems
- Closed