Accidently reset SELINUX context for /var folder permissions....HELP!?!?!?

alannerd · 01-30-2011, 02:47 PM

Hello all,

I accidently reset the SELINUX context on the /var folder from "var_t" to user data. Now I cant go back and set it to "var_t" and i cant access my website anymore.

Any help for this newbie?

Thanks,

Alan

zer0signal · 01-30-2011, 03:13 PM

I am not very fluent with dealing with SEcurity Contexts, but you should be able to change it back to whatever it was with

chcon

info regarding using chcon

info chcon

trist007 · 01-30-2011, 03:16 PM

Try the restorecond command

http://linux.die.net/man/8/restorecond

ianll · 01-30-2011, 04:18 PM

Since you can't see your website, you probably won't mind rebooting your server.

I would recommend the following course of action - it's fully automatic:

Code:

setenforcing 0
touch /.autorelabel
reboot

Temporarily pasify SELinux - will allow your server to work, but without SELinux protection.

From the SELinux man page: "The best way to relabel the file system is to create the flag file /.autorelabel and reboot."

I hope this gets you out of difficulty.

Ian