SELinux AVC denial for setpgid

Description

Percona XtraDB Cluster 5.7 has an SELinux AVC denial during cluster node startup for "setpgid" on target context mysqld_t.

 

This issue is even documented in your own Percona Blog at:

https://www.percona.com/blog/2018/06/21/enforcing-selinux-with-percona-xtradb-cluster/

 

It is fixed with:
 
allow mysqld_t self:process { setpgid };

Additionally, https://perconadev.atlassian.net/browse/PS-4813#icft=PS-4813 is not fixed on Percona XtraDB Cluster 5.7 and should probably be ported?

Environment

EL7

relates to

Smart Checklist

Activity

Julia Vural March 4, 2025 at 9:28 PM

It appears that this issue is no longer being worked on, so we are closing it for housekeeping purposes. If you believe the issue still exists, please open a new ticket after confirming it's present in the latest release.

Lalit Choudhary April 26, 2019 at 8:34 AM

Hi

Thank you for the report.

Won't Do

Details

Assignee

Reporter

Affects versions

Priority

Smart Checklist

Created April 4, 2019 at 4:59 AM
Updated March 4, 2025 at 9:28 PM
Resolved March 4, 2025 at 9:28 PM

Flag notifications