Apache and SELinux help

reynold · 04-06-2011, 10:24 AM

Hello everyone, i am pretty new to SELinux and im currently working on something was just wondering if anyone could give me a few pointers or tips.

So i am trying to confine the apache HTTP server with SELinux on my Centos5.5 system. As i am new to SELinux im not to sure how to go about in doing this.

I have configured apache to have a static web page in /var/www/html and also dynamic cgi scripts under /var/www/scripts.

if anyone can help that would be awesome. Thanks in advance!!

unSpawn · 04-06-2011, 01:32 PM

Quote:

Originally Posted by reynold

i am trying to confine the apache HTTP server with SELinux on my Centos5.5 system.

Centos-5.5 comes with a policy for Apache and you can confirm booleans and context are in place by running 'ls -Z /var/www/ /usr/sbin/httpd*; getsebool -a|grep httpd'. Also see 'man httpd_selinux'.

chrism01 · 04-07-2011, 09:03 PM

As unSpawn said, SELinux is defaulted to on in RHEL/Centos 5.x, so just check out those cmds.
for more detail, here's the Admin handbook http://www.linuxtopia.org/online_boo...ion/index.html