MariaDB auth_pam.so plugin or other auth plugins cannot be used
Issue
- MariaDB auth_pam.so plugin or other auth plugins cannot be used
- Unable to login into the
MariaDB dbinstance whenselinuxis set toenforcingmode. - We have created the user in the DB with
mysql (mariadb version)
> INSTALL SONAME 'auth_pam';
> create user <myldapuser>@localhost IDENTIFIED VIA pam USING 'mariadb';
- I am able to log into the
MariaDBdb instance just fine via theldap/adauthenticated account whenselinuxis set topermissivemode. - With
selinuxenforcing, we are getting below errors:
==> /var/log/secure <==
mysqld: PAM audit_open() failed: Permission denied
==> /var/log/audit/audit.log <==
avc: denied
- We are getting following
avcinaudit.log:
----
type=SYSCALL msg=audit(03/12/2015 10:48:34.935:47) : arch=x86_64 syscall=socket success=yes exit=36 a0=netlink a1=SOCK_RAW a2=igp a3=0xcccccccd items=0 ppid=1009 pid=1635 auid=unset uid=mysql gid=mysql euid=mysql suid=mysql fsuid=mysql egid=mysql sgid=mysql fsgid=mysql tty=(none) ses=unset comm=mysqld exe=/opt/rh/mariadb55/root/usr/libexec/mysqld subj=system_u:system_r:mysqld_t:s0 key=(null)
type=AVC msg=audit(03/12/2015 10:48:34.935:47) : avc: denied { create } for pid=1635 comm=mysqld scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=netlink_audit_socket
----
type=SYSCALL msg=audit(03/12/2015 10:48:34.937:48) : arch=x86_64 syscall=sendto success=yes exit=144 a0=0x24 a1=0x7f65a0b75b20 a2=0x90 a3=0x0 items=0 ppid=1009 pid=1635 auid=unset uid=mysql gid=mysql euid=mysql suid=mysql fsuid=mysql egid=mysql sgid=mysql fsgid=mysql tty=(none) ses=unset comm=mysqld exe=/opt/rh/mariadb55/root/usr/libexec/mysqld subj=system_u:system_r:mysqld_t:s0 key=(null)
type=AVC msg=audit(03/12/2015 10:48:34.937:48) : avc: denied { nlmsg_relay } for pid=1635 comm=mysqld scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=netlink_audit_socket
Environment
- Red Hat Enterprise Linux 6
- selinux-policy-3.7.19-260.el6_6.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.