Thanks for sharing!
Robert, you should definitely report this as a bug in Elgg (failures are not being logged) but can you please see if you can find a docker image that most matches your system (ideally with Apache/PHP)? We can then have a shot at reproducing this locally.
I'm going to try getting this information included in the documentation so that it's not so painful for others to get this information in the future.
A patch has been landed into the 3.3 branch (which, as I understand, will propagate elsewhere) which updates the documentation to mention the SELinux contexts and booleans, so hopefully more people will see the note in the documentation and get it right the first time. :)
@Steve Clay - I'm not familiar with Docker, so I'm not really sure what exactly you're asking me to produce for you. The system in question is a vanilla CentOS 8 amd64 virtual machine that was installed straight from the DVD image with SELinux left in 'enforcing' mode, so chances are good you might be able to find such a thing on your own?
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.