Troubleshooting SELinux Issues

Attempt to start the service:

systemctl start httpd

View the status log:

systemctl status httpd -l

View recent SELinux errors:

ausearch -m avc -ts recent

Find the inode it's attempting to write to:

find / -inum <inode number>

View the SELinux context of the directory/file:

ls -Z /var/log/httpd

Restore the proper file context:

restorecon -Rv /var/log/httpd

Attempt to view the web content:

curl localhost

View recent AVC errors:

ausearch -m avc -ts recent

Find the inode of the file/directory:

find / -inum <inode number>

View the context of the file/directory:

ls -Z /home/cloud_user/html/index.html

Install sealert:

yum -y install setroubleshoot setroubleshoot-server

Restart the auditd service:

service auditd restart

Use sealert for more information:

sealert -a /var/log/audit/audit.log

Lookup the httpd_read_user_content boolean:

getsebool httpd_read_user_content

Set the boolean to permit reading user content:

setsebool -P httpd_read_user_content=1

View the web content:

curl localhost