From b7dfde7fdaf4dae7e847b42c0be7b7b0269c1049 Mon Sep 17 00:00:00 2001 From: Josh Date: Tue, 19 Nov 2024 09:02:40 -0500 Subject: [PATCH] docs(admin): Add tip about detecting silent denials in SELinux Signed-off-by: Josh --- admin_manual/installation/selinux_configuration.rst | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/admin_manual/installation/selinux_configuration.rst b/admin_manual/installation/selinux_configuration.rst index 4d6e8254b82..3cf33df4f3a 100644 --- a/admin_manual/installation/selinux_configuration.rst +++ b/admin_manual/installation/selinux_configuration.rst @@ -6,7 +6,12 @@ SELinux configuration When you have SELinux enabled on your Linux distribution, you may run into permissions problems after a new Nextcloud installation, and see ``permission -denied`` errors in your Nextcloud logs. +denied`` errors in your Nextcloud logs. + + +.. tip:: + Permission problems may be caused by SELinux *even if the denial is not indicated in the audit logs.* This is + because SELinux does not log all system calls used for verifying access. See `Possible Causes of Silent Denials `_ to solve. The following settings should work for most SELinux systems that use the default distro profiles. Run these commands as root, and remember to adjust the filepaths