Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-24941

SElinux incorrect label for server socket

    XMLWordPrintable

Details

    • Related to install and upgrade
    • On Fedora, RHEL, and derivatives, depend on the mysql-selinux-1.0.14 package that provides the correct selinux rules for the /usr/sbin/mariadbd that is installed.
    • Q3/2025 Maintenance

    Description

      Tried couple of locations for the server's `socket` parameter

      These two end up with correct label mysqld_var_run_t
      /var/run/mysql/imthesocket.sock
      /var/run/mysqld/imalsothesocket.sock

      And these two have incorrect labels
      /var/run/mariadb/itriedtobeasocket.sock is labeled var_run_t
      /var/lib/mysql/mysql.sock is labeled as mysqld_db_t
      Both of which can be fixed by running restorecon on them which flips them back to mysqld_var_run_t

      Also might be related to older issue MDEV-10405 and 10.3.27 wasn't affected by this as it was the starting point of the upgrade to 10.5.8. Clean install is also affected.

      Attachments

        Issue Links

          is part of

          Bug - A problem which impairs or prevents the functions of the product. MDEV-37680 Fedora MariaDB depends on mysql-selinux

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-30520 SELinux incorrectly labeled mariadbd

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MCOL-5825 selinux rules needed to enable columnstore

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-10405 mysql.sock gets created with different SELinux context

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          links to

          Web Link Fedora Repo of policy

          Web Link Pull request

          Activity

            People

              danblack Daniel Black
              ospifi Jesse Sandberg
              Votes:
              4 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: