Remote database connection with http and SELinux

In my recent post on FTP connections and SELinux I mentioned that one has to specifically enable a setting with “setsebool”. Well, today I had some problems with a remote database connection that was setup correctly, but still could not connect to the database successfully.

As it turned out, it was another “fine” SELinux setting. This time we had to tell SELinux to allow network connections to databases. This can be done with:

/usr/sbin/setsebool httpd_can_network_connect_db=1

This applies to any application server that tries to connect to a remote database like a CFML or PHP server.

  • Facebook
  • Digg
  • TwitThis
  • Sphinn
  • del.icio.us
  • Mixx
  • Google Bookmarks
  • MisterWong
  • StumbleUpon
  • email
  • FriendFeed
  • Identi.ca
  • LinkedIn
  • Netvibes
  • Ping.fm
  • RSS
  • Tumblr
  • Twitter
If you enjoyed this post, make sure you subscribe to my RSS feed!

About this entry