Apache startup failed (points!)

[Chhaya_Z]

Hi Christian,
Point1:
From the above output i see that SElinux is enabled however it is in permissive mode
#sestatus ==> plz paste the output
The required output should be as follows:
SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: enforcing
Mode from config file: enforcing

Point 2: "/etc/pki/tls/private/localhost.key default SELinux type is
cert_t, but its current type is admin_home_t. Changing this file back to the
default type, may fix your problem."

Plz check the current context of the file using below command:
#ls -Z /etc/pki/tls/private/localhost.key

If the context is anything other than whats suggested from the sealert message then you can change it to required one using the below command:

#chcon -R -t cert_t /etc/pki/tls/private/localhost.key

Hope this helps.

[Christian Deutsch_1]

Chhaya,

When I set SELinux to permissive mode, the web page is served fine:

sestatus
SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: permissive
Mode from config file: permissive
Policy version: 24
Policy from config file: targeted

As I already mentioned several times before, when I set SELinux to enforced mode, the web page is not served at all (0 bytes).

ls -Z /etc/pki/tls/private/localhost.key
-rw-r--r--. root root system_u:object_r:cert_t:s0 /etc/pki/tls/private/localhost.key

ls -Z /etc/pki/tls/certs/localhost.crt
-rw-------. root root unconfined_u:object_r:cert_t:s0 /etc/pki/tls/certs/localhost.crt

Any more ideas?

I guess since there are no new SELinux messages in /var/log/messages, something else might be needed.

Christian