Hi,
We run many Library / web / database applications on RedHat servers with
SELinux enabled. Sometimes it takes a bit of investigation and horsing
around but I haven't yet found a situation where it had to be disabled.
setsebool and chcon can solve most problems and SELinux is an
excellent enhancement to standard filesystem and ACL security.
-Graham
--
Graham Stewart
Network and Storage Services Manager, Information Technology Services
University of Toronto Library
130 St. George Street
Toronto, Ontario graham.stewart_at_utoronto.ca
Canada M5S 1A5 Phone: 416-978-6337 | Mobile: 416-550-2806 |
Fax: 416-978-1668
Ken Irwin wrote:
> Hi all,
>
> Thanks for your extensive suggestions and comments. A few folks suggested that SELinux might be the issue. Tobin's suggestion to change one of the settings proved effective:
> "# setsebool -P httpd_can_network_connect 1".
>
> Thanks to everyone who helped -- I learned a lot.
>
> Joys
> Ken
>
> -----Original Message-----
> From: Code for Libraries [mailto:CODE4LIB_at_LISTSERV.ND.EDU] On Behalf Of Greg McClellan
> Sent: Tuesday, November 24, 2009 10:04 AM
> To: CODE4LIB_at_LISTSERV.ND.EDU
> Subject: Re: [CODE4LIB] calling another webpage within CGI script
>
> Hi,
>
> I had a similar problem a while back which was solved by disabling
> SELinux. http://www.crypt.gen.nz/selinux/disable_selinux.html
>
> -Greg
Received on Tue Nov 24 2009 - 11:20:36 EST