Cobra Forum

Applicable to:

• Plesk for Linux

Symptoms

• Database connections made through PHP fail:
• Websites do not load with similar messages:
  
  Code Select Expand
  Error establishing a database connection
  Code Select Expand
  An unexpected database error occurred. Please try again later.
• Roundcube webmail does not load with:
  
  Code Select Expand
  Oops... something went wrong!
An internal error has occurred. Your request cannot be processed at this time.
For administrators: Please check the application and/or server error logs for more information.and the following error message is logged in Roundcube error log /var/log/plesk-roundcube/errors:
  CONFIG_TEXT DB Error: SQLSTATE[HY000][2002] Permission denied in /usr/share/psa-
  oundcube/program/lib/Roundcube/rcube_db.php on line 201 (GET /)
  
• SELinux is in enforcing mode:
  
  Code Select Expand
  #sestatus | grep 'Current mode'
Current mode: enforcing
• Messages about php-fpm and mysql.sock are logged in /var/log/audit/audit.log:
  
  
  Code Select Expand
  type=AVC msg=audit(1739696552.295:5057): avc: denied { connectto } for pid=74152
comm="php-fpm"path="/var/lib/mysql/mysql.sock" scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=unix_stream_socket permissive=0
type=SYSCALL msg=audit(1739696552.295:5057): arch=c000003e syscall=42 success=no exit=-13
a0=6 a1=7fff7a1224a0 a2=1b a3=1 items=0 ppid=74143 pid=74152 auid=4294967295 uid=10020
gid=1003 euid=10020 suid=10020 fsuid=10020 egid=1003 sgid=1003 fsgid=1003 tty=(none)
ses=4294967295 comm="php-fpm" exe="/opt/plesk/php/8.2/sbin/php-fpm"
subj=system_u:system_r:httpd_t:s0 key=(null)ARCH=x86_64 SYSCALL=connect AUID="unset"
UID="**REDACTED**" GID="**REDACTED**" EUID="**REDACTED**" SUID="**REDACTED**"
FSUID="**REDACTED**" EGID="**REDACTED**" SGID="**REDACTED**" FSGID="**REDACTED**"
type=PROCTITLE msg=audit(1739696552.295:5057): proctitle=**REDACTED**

Cause
SELinux is blocking the database connection requests made through PHP-FPM, because /usr/sbin/mariadbd
has wrong SELinux label.

Resolution

• Connect to your Plesk server via SSH.
• Restore SELinux context for MariaDB file:
  
  Code Select Expand
  #restorecon /usr/sbin/mariadbd
• Restart MariaDB service:
  
  Code Select Expand
  #systemctl restart mariadb