From 38cb8ab5dbc46d300db87caab10312ac94b357f4 Mon Sep 17 00:00:00 2001 From: kedearian Date: Fri, 11 Aug 2017 03:34:21 -0500 Subject: [PATCH] docs: Allow host renames with selinux enforcing for CentOS installs * Allow host renames with selinux enforcing you have to change the fcontext of /opt/librenms/rrd/ to allow read/write. * Update Installation-CentOS-7-Nginx.md Changed to add semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/rrd(/.*)?' to complete the selinux change. * Update Installation-CentOS-7-Apache.md --- doc/Installation/Installation-CentOS-7-Apache.md | 2 ++ doc/Installation/Installation-CentOS-7-Nginx.md | 3 +++ 2 files changed, 5 insertions(+) diff --git a/doc/Installation/Installation-CentOS-7-Apache.md b/doc/Installation/Installation-CentOS-7-Apache.md index 0c27ed653b..47c11257fc 100644 --- a/doc/Installation/Installation-CentOS-7-Apache.md +++ b/doc/Installation/Installation-CentOS-7-Apache.md @@ -99,6 +99,8 @@ Add the following config: yum install policycoreutils-python semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/logs(/.*)?' semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/logs(/.*)?' + semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/rrd(/.*)?' + semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/rrd(/.*)?' restorecon -RFvv /opt/librenms/logs/ setsebool -P httpd_can_sendmail=1 setsebool -P httpd_can_network_connect=1 diff --git a/doc/Installation/Installation-CentOS-7-Nginx.md b/doc/Installation/Installation-CentOS-7-Nginx.md index 4676951e27..2a9c85bc63 100644 --- a/doc/Installation/Installation-CentOS-7-Nginx.md +++ b/doc/Installation/Installation-CentOS-7-Nginx.md @@ -125,7 +125,10 @@ server { yum install policycoreutils-python semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/logs(/.*)?' semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/logs(/.*)?' + semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/rrd(/.*)?' + semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/rrd(/.*)?' restorecon -RFvv /opt/librenms/logs/ + restorecon -RFvv /opt/librenms/rrd/ setsebool -P httpd_can_sendmail=1 ```