HTTP question

latinmusic74 · 11-25-2008, 09:59 PM

How would you configure SELinux to support HTTP?

and

How would you configure user-based and host-based security for HTTP?

Thanks

blacky_5251 · 11-25-2008, 11:49 PM

These are really opened ended questions. How do you configure SELinux for HTTP? Well that depends on what HTTP you're doing. Do you allow private web sites in /home/user/public_html? Do you use CGI? PHP?

Run "getsebool -a | grep http" to see what SELinux parameters can be tuned, and that may give you a start on what you need to change.

What platform are you using? RHEL or CentOS?

Perhaps you could also explain a little more about what you want to achieve with your second question?

XavierP · 11-26-2008, 09:01 AM

Moved: This thread is more suitable in Linux-General and has been moved accordingly to help your thread/question get the exposure it deserves.

custangro · 11-26-2008, 09:53 AM

Quote:

Originally Posted by blacky_5251

These are really opened ended questions. How do you configure SELinux for HTTP? Well that depends on what HTTP you're doing. Do you allow private web sites in /home/user/public_html? Do you use CGI? PHP?

Run "getsebool -a | grep http" to see what SELinux parameters can be tuned, and that may give you a start on what you need to change.

What platform are you using? RHEL or CentOS?

Perhaps you could also explain a little more about what you want to achieve with your second question?

I agree with blacky...

Also, along with the "sebool" commands, you need to set the directory options correctly...

If you doc root is NOT in /var/www/html (like in /web for example) the you need to set the directory correctly.

Use...

Code:

root@host# ll -dZ /var/www/html

This will show you what you need to set your directory as...this is just a piece, as blacky has mentioned you need to set your sebool's correctly as well

-C

nehaandrew · 11-27-2008, 05:04 AM

This might sound silly ... but, as per my understanding:
Shouldn't one install a WebServer/Application Server if they want to be able to serve HTTP pages hosted on the machine?

Please do correct me if I am wrong!

Linux

blacky_5251 · 11-27-2008, 06:05 AM

I've interpreted the question to mean:- "What needs to be tweaked in SELinux for Apache to work?" So my assumption is that Apache HTTPD is already installed and running, but SELinux needs tweaking for it to work properly.