On 1/6/2012 2:24 AM, Philippe Naudin wrote:
> Le ven 06 jan 2012 02:00:27 CET, Bennett Haselton a écrit:
>
>> On 1/5/2012 1:36 PM, Bennett Haselton wrote:
>> ...
>> OK, notwithstanding the fact that the filesystem on the above machine
>> needs to be re-labeled and I don't know why that's failing --
>>
>> I have another CentOS 5.7 machine where I've enabled SELinux (permissive
>> mode) and relabeled the filesystem and it actually worked, so that the
>> above commands are now giving the expected outputs:
>>
>> [root@g6950-21025 ~]# ps awuxZ | grep httpd | head -n 3
>> system_u:system_r:init_t root 2302 0.0 1.0 253056 10576
>> ? Ss 00:12 0:00 /usr/sbin/httpd
>> system_u:system_r:init_t apache 4201 0.1 2.0 274804 20968
>> ? S 01:26 0:02 /usr/sbin/httpd
>> system_u:system_r:init_t apache 4392 0.2 1.2 257308 12512
>> ? S 01:39 0:01 /usr/sbin/httpd
> Apache running as "init_t" is a call for troubles.
Is it? OK, any idea what caused that and how to fix it?
I can't find much on Google about it except this page:
http://fedoraproject.org/wiki/SELinux/EnforcePolicy
says "The init process then runs /etc/rc.d/rc.sysinit, which is labeled
initrc_exec_t. The kernel has a rule that says when init_t execs
initrc_exec_t it transitions to initrc_t. So this continues until the
httpd executable gets started as httpd_t." Even though in my case it's
not happening.
> $ ps awuxZ | grep [a]pache
> system_u:system_r:httpd_t apache ... /usr/sbin/httpd
>
>> [root@g6950-21025 ~]# ls -lZ /var/www/html/robots.txt
>> -rw-rw-rw- root root system_u:object_r:httpd_sys_content_t
>> /var/www/html/robots.txt
> This is correct.
>
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
