Postingan ini hanya mendokumentasikan solusi untuk mengatasi permasalahan gagal akses aplikasi yang ditanam di server httpd (apache) akibat security permission pada SELinux (yang diaktifkan).

  1. Cek permission SELINUX:
    ls -LZ
  2. Lihat hasilnya:
    drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 bootstrap
    drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 storage
  3. Ubah security dari “httpd_sys_content_t” menjadi “httpd_sys_rw_content_t”
    • chcon -Rv -t httpd_sys_rw_content_t bootstrap/
      changing security context of ‘bootstrap/app.php’
      changing security context of ‘bootstrap/autoload.php’
      changing security context of ‘bootstrap/cache/.gitignore’
      changing security context of ‘bootstrap/cache’
      changing security context of ‘bootstrap/’
      changing security context of ‘storage/app/.gitignore’
      changing security context of ‘storage/app/public/.gitignore’
      changing security context of ‘storage/app/public’
      changing security context of ‘storage/app’
      changing security context of ‘storage/framework/.gitignore’
      changing security context of ‘storage/framework/cache/.gitignore’
      changing security context of ‘storage/framework/cache’
      changing security context of ‘storage/framework/sessions/.gitignore’
      changing security context of ‘storage/framework/sessions’
      changing security context of ‘storage/framework/views/.gitignore’
      changing security context of ‘storage/framework/views’
      changing security context of ‘storage/framework’
      changing security context of ‘storage/logs/.gitignore’
      changing security context of ‘storage/logs’
      changing security context of ‘storage/oauth-private.key’
      changing security context of ‘storage/oauth-public.key’
      changing security context of ‘storage/’
    • chcon -Rv -t httpd_sys_rw_content_t storage/
      changing security context of ‘storage/app/.gitignore’
      changing security context of ‘storage/app/public/.gitignore’
      changing security context of ‘storage/app/public’
      changing security context of ‘storage/app’
      changing security context of ‘storage/framework/.gitignore’
      changing security context of ‘storage/framework/cache/.gitignore’
      changing security context of ‘storage/framework/cache’
      changing security context of ‘storage/framework/sessions/.gitignore’
      changing security context of ‘storage/framework/sessions’
      changing security context of ‘storage/framework/views/.gitignore’
  4. Lihat hasilnya lagi:
    ls -LZ
    drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 bootstrap
    drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 storage

Seharusnya sih problem sudah solved dengan langkah-langkat di atas 🙂

Tinggalkan Balasan

Alamat email Anda tidak akan dipublikasikan. Ruas yang wajib ditandai *