[Gllug] Pulling my hair out - mysql replication not trying the remote server

Stuart Sears stuart at sjsears.com
Mon Oct 3 15:05:57 UTC 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andy McGarty wrote:
> On Sat, 01 Oct 2005 22:53:23 +0100, Adrian McMenamin 
> <adrian at mcmen.demon.co.uk> wrote:
> 
>> On Sat, 2005-10-01 at 22:48 +0100, Andy McGarty wrote:
>>
>>> On Sat, 01 Oct 2005 22:35:24 +0100, Adrian McMenamin
>>> <adrian at mcmen.demon.co.uk> wrote:
>>>
> snip
> 
>>> Thats it!!!  I really would have been bored before I spotted that.
>>> I turned it off with /usr/sbin/setenforce 0 and now it works.
>>
>>
>> It will fundamentally harden the security on your machine but having
>> been in your position once too often I gave up trying to use it and now
>> just turn it off.
>>
>> It will only let those daemons you select communicate with the outside
>> world.
Well, strictly speaking this is not what it is designed for... it's
really to protect a *local* system against network daemon exploits - it
prevents (for example) mysqld from reading/writing files that itisn;t
supposed to, or (probably) from binding to non-standard ports or
exec-ing scripts with the wrong file context...
>>
>> At a basic level FC4 + SELINUX is a different OS from FC4 (to be fair to
>> RH/F they acknowledge that)
>>
> 
> Cheers for your help.  I'll turn it off for now and then see what I can
> do  to turn it back on later.
> 
> Andy
> 
Do you have an X server running?
try
system-config-securitylevel
or
togglesebool mysqld_disable_trans

to debug the actual reason for the denials:
did you disable SELinux on server or client?
what were the errors in /var/log/audit/audit.log that mysqld generated?

Stuart
- --
Stuart Sears RHCE RHCX
printk("; corrupted filesystem mounted read/write - your computer
        will explode within 20 seconds ... but you wanted it so!\n");
        linux-2.4.3/fs/hpfs/super.c
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFDQUjUamPtx1brPQ4RAumcAJ9adf2OIuO2LicFZsdiEZV9jSBtNACfb33l
LyN4grYys2Lrn7UjBMImyUw=
=cUX8
-----END PGP SIGNATURE-----
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list