Foreman » SELinux

On RHEL6 the port is not correctly associated in the enable script due to shell comparison typo:

[root@abc ~]# semanage port -l | grep 8774

Therefore provisioning fails:

type=AVC msg=audit(1467663634.790:77212): avc: denied { name_connect } for pid=7928 comm="diagnostic_con*" dest=8774 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=tcp_socket

This was discovered during QA of: https://bugzilla.redhat.com/show_bug.cgi?id=1318327