Hi; Redhat does provide information about this: http://fedora.redhat.com/docs/selinux-apache-fc3/index.html This is marked as a 'beta' document, so perhaps someone from the Apache camp should review it before it gets cast in concrete... And to be complete, it should be noted that it is not only httpd that is affected; several network daemons are being treated with special policies, and more may be added. See their FAQ, in particular http://fedora.redhat.com/docs/selinux-faq-fc3/index.html#id2764702 hugh Thom Hehl wrote: > That's why I wanted to make a point and document all of my trials for > this list. At least someone will have a pointer. This does look handy, > but I'm simply not running a production Apache server at the moment and > the research can wait. When I do it, I'll try to write something for > Apache.:) > > Thanks for the pointer. > > Nick Kew wrote: > > >On Tue, 19 Jul 2005, Thom Hehl wrote: > > > >>Is this a secret? Why does no one know about this selinux thing? Anyway, > >>I turned it off for now. Maybe I'll go back and figure it out later. > > > >Presumably it should be up to the creators of SELinux to document what > >they're doing, including issues likely to hit you. I guess the Apache > >FAQ might then point to the SELinux documentation. > > > >For apache to provide any specific help on SELinux issues would require > >someone to write it. In the absence of a contribution direct from the > >SELinux folks, the best we're likely to get is contributions from > >people like you who have figured out something useful. > > > >Over to you ... :-) -- Hugh Williams "There are two things to aim for in life; hugh_williams@xxxxxxxxxxx first, to get what you want; and after that, Agilent Technologies to enjoy it. Only the wisest of mankind Santa Rosa 2US-C achieve the second." 707.577.4941 - Logan Pearsall Smith, 1931 --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|