Re: SELinux configuration for web server.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Watch this vid: https://m.youtube.com/watch?v=_WOKRaM-HI4

On Sun, Jun 21, 2020, 16:17 Alain D D Williams <addw@xxxxxxxxxxxx> wrote:
On Sun, Jun 21, 2020 at 08:06:40PM +0000, Jason Long wrote:
> Hello,I want to install Apache, MySQL and PHP on CentOS 8, but I don't like to disable SELinux. I know that SELinux maybe cause some problems and I want to configure it to protect my system. Which SELinux configuration and commands I must run?I'm thankful if anyone share the experiences.

I have just done this.

What I did was to set the server up and run it and watch it fail - ie not be
able to do something because of a permissions failure. Look at /var/log/messages
and look for a line containing 'SELinux is preventing'

The line will have several #012 - replace these by newlines

That will give you a message that tells you what is wrong and suggestions of how
to fix the problem (you decide first if it is a problem and not something that
should be prevented!)

Sometimes the suggestion does not fix it, try another. This is the bit that I do
not like the most; it is not always obvious which of the fixes you should adopt;
then, maybe later, how to back out a fix that did not work or that you decided
was the wrong one.

I suggest keeping a log of these messages and what you did in response to it.

Good luck.

--
Alain Williams
Linux/GNU Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.
+44 (0) 787 668 0256  https://www.phcomp.co.uk/
Parliament Hill Computers Ltd. Registration Information: https://www.phcomp.co.uk/Contact.html
#include <std_disclaimer.h>
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux