RE: apache selinx problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




I was referring to your perl script.

Jay Berryman, RHCT, RHCE
Systems Engineer
Phone:  (402)-963-6347
E-Mail:  Jay.Berryman@xxxxxxxxx
 

This message and any attachments are intended only for the use of the
addressee and may contain information that is privileged and confidential.
If the reader of the message is not the intended recipient, or the
authorized agent of the intended recipient, you are hereby notified that any
dissemination of this communication is strictly prohibited. If you have
received this communication in error, please notify SITEL immediately by
telephone at 402.963.6001 and delete the message and any attachments from
your system. Thank you for your cooperation.

 
 
-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx]
On Behalf Of Bill Tangren
Sent: Monday, November 13, 2006 8:52 AM
To: General Red Hat Linux discussion list
Subject: Re: apache selinx problem

Jay Berryman wrote:
> Can you send a copy of the script?  SELinux may be killing your script
based
> on what it is doing.
> 

Where do I find this script? I've been hunting around in subdirectories of 
/etc/selinux, but not finding any likely suspects.


> Jay Berryman, RHCT, RHCE
> Systems Engineer
> Phone:  (402)-963-6347
> E-Mail:  Jay.Berryman@xxxxxxxxx
>  
> 
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient, or the
> authorized agent of the intended recipient, you are hereby notified that
any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify SITEL immediately by
> telephone at 402.963.6001 and delete the message and any attachments from
> your system. Thank you for your cooperation.
> 
>  
>  
> 
> -----Original Message-----
> From: redhat-list-bounces@xxxxxxxxxx
[mailto:redhat-list-bounces@xxxxxxxxxx]
> On Behalf Of Bill Tangren
> Sent: Thursday, November 09, 2006 11:53 AM
> To: General Red Hat Linux discussion list
> Subject: Re: apache selinx problem
> 
> Jay Berryman wrote:
>> I just went through everything and noticed something I missed.  Try
> changing
>> the security context of your perl script to the following:  
>>
>> user_u:object_r:httpd_sys_script_exec_t
>>
>> Let me know if that fixes it or not.
> 
> It does not. This is very frustrating. I am contemplating turning off
> SELinux 
> monitoring of the apache server.
> 
>> Jay Berryman, RHCT, RHCE
>> Systems Engineer
>> Phone:  (402)-963-6347
>> E-Mail:  Jay.Berryman@xxxxxxxxx
>>  
>>
>> This message and any attachments are intended only for the use of the
>> addressee and may contain information that is privileged and
confidential.
>> If the reader of the message is not the intended recipient, or the
>> authorized agent of the intended recipient, you are hereby notified that
> any
>> dissemination of this communication is strictly prohibited. If you have
>> received this communication in error, please notify SITEL immediately by
>> telephone at 402.963.6001 and delete the message and any attachments from
>> your system. Thank you for your cooperation.
>>
>>  
>>  
>>
>> -----Original Message-----
>> From: redhat-list-bounces@xxxxxxxxxx
> [mailto:redhat-list-bounces@xxxxxxxxxx]
>> On Behalf Of Bill Tangren
>> Sent: Tuesday, November 07, 2006 9:33 AM
>> To: General Red Hat Linux discussion list
>> Subject: Re: apache selinx problem
>>
>> Jay Berryman wrote:
>>> I don't think it's available in RHEL4.  Can you send the output of
>> getsebool
>>> -a | grep httpd?  It might be that httpd_suexec_disable_trans needs to
be
>>> set to off.
>> [root@doggett local]# getsebool -a|grep httpd
>> httpd_builtin_scripting --> active
>> httpd_disable_trans --> inactive
>> httpd_enable_cgi --> active
>> httpd_enable_homedirs --> active
>> httpd_ssi_exec --> active
>> httpd_tty_comm --> inactive
>> httpd_unified --> active
>> [root@doggett local]#
>>
>>
> 

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux