Foreman » SELinux

The memcached plugin is not working because passenger is not allowed to connect memcache_port_t

• Just install the ruby193-rubygem-foreman_memcache package and configure it to localhost
• login on Foreman

• In production log: DalliError: No server available
• selinux logs: ruby system_u:system_r:passenger_t:s0 42 tcp_socket name_connect system_u:object_r:memcache_port_t:s0 denied 16180

Solutions

1. setsebool -P passenger_can_connect_all=on (personally my last resort solution)
2. Create a selinux module (See below)

module passenger_can_connect_memcache 1.0;

require {
        type passenger_t;
        type memcache_port_t;
        class tcp_socket name_connect;
}

#============= passenger_t ==============

#!!!! This avc can be allowed using the boolean 'passenger_can_connect_all'
allow passenger_t memcache_port_t:tcp_socket name_connect;