similar to: SELinux targeted + httpd + suexec

Hello, I'm using the latest CentOS with phpBB 3.0.x + postgreSQL + sendmail (relayed through gmail.com) - all those programs working fine, with no big modifications of the CentOS defaults (i.e. SELinux is on). Now I'm struggling with the seemingly simple problem, that when I put an .html file into /var/www/html/ then Apache won't serve it. In the browser I see: "Forbidden You

Hello CentOS, I don't usually use RPM's for apache, but I'm playing with a centos 4.2 w/apache and suexec. I've got the suexec apache RPM installed, but I'm not sure how to actually get apache to use it. The /etc/httpd/conf/httpd.conf does show it in the modules: LoadModule suexec_module modules/mod_suexec.so but httpd -l doesn't list suexec as being loaded. I'm

I'm setting up a dedicated database server, and since this will be a central service to my various web servers I wanted it to be as secure as possible...so I am leaving SELinux enabled. However I'm having trouble getting Apache to use mod_auth_pam. I also now can't get setroubleshootd working to send me notifications of the denials and provide tips to solve the problem. The Apache

> type=AVC msg=audit(1482944350.289:339): avc: denied { read } for pid=2141 comm="httpd" name="family" dev="sda3" ino=262199 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=dir permissive=0 I ran into the same problem, I think. I ran "audit2why" and passed in the AVC. It suggested a pair of booleans

Hi, Here's a list of all the booleans I tweaked on my server running CentOS 7: $ sudo cat /etc/selinux/targeted/active/booleans.local # This file is auto-generated by libsemanage # Do not edit directly. named_write_master_zones=0 httpd_can_sendmail=1 httpd_unified=1 ftpd_full_access=1 httpd_can_network_connect=1 spamd_enable_home_dirs=1 How can I "reset" (in a manner of speaking)

SELinux appears to be interfering with winbind's functionality. I have the lastest policy package installed: selinux-policy-targeted-1.17.30-2.149 which allegedly solves this problem according to the RedHat knowledge base, but clearly does not. I have to turn off SELinux by using setenforce 0 (permissive) to get winbind to work at all, and based on what I see in the log files,

CentOS-6.6 We have sshd chroot working, mostly, for a particular groupid. However, we have two things that remain u/s, no doubt due to some omission on my part. Basically, we would like our users to be able to tunnel their https over the ssh connection to this server and be able to do X11 forwarding as well. At the moment both work when the user connects without chroot and neither works if

I''ve posted my experiences getting Rails running under CGI on a shared host that has suEXEC enabled on the wiki ( http://wiki.rubyonrails.org/rails/pages/RailsAndSuExec). I''m curious if anyone else has dealt with Rails and suEXEC before, and if so what approach they took. Avdi Grimm -------------- next part -------------- An HTML attachment was scrubbed... URL:

I have a number of vhosts configured with SuexecUserGroup to run the scripts with limited privileges and the dept. web-site on one of them. The problem is the webmaster can't read online context help which comes with the cms the site is using. Most help files (>2K) have *.php.html extension. *.php and *.html scripts both work as I suspect they should, but when it comes to *.php.html suexec

Hi all, I'm trying to add some milters (particularly spamass-milter and clamav-milter, which I acquired through rpmforge) to my postfix configuration on Centos5 with the targeted SELinux policy.. I'm running into difficulty getting postfix to communicate through the unix domain sockets created by the milters, because selinux keeps blocking them. I've attempted to use audit2allow

postfixadmin setup.php is claiming: *Error: Smarty template compile directory templates_c is not writable.* *Please make it writable.* *If you are using SELinux or AppArmor, you might need to adjust their setup to allow write access.* This goes away with 'setenforce 0', so it is an SELinux issue. I have tried both: restorecon -Rv /usr/share/postfixadmin and chcon -R -t

My application starts successfully but if look with ps ax I can see that I have 5 instances of it open: frank@limedes:~ > ps ax |grep wine 17937 pts/2 S 0:02 wine C:\Program Files\C4DNET_R73 PC\C4D_NET_Client.exe 17939 ? S 0:05 wineserver 17940 pts/2 S 0:05 wine C:\Program Files\C4DNET_R73 PC\C4D_NET_Client.exe 17941 pts/2 S 0:00 wine C:\Program

On 02/21/2017 11:46 AM, Zdenek Sedlak wrote: > On 2017-02-21 17:30, Robert Moskowitz wrote: >> postfixadmin setup.php is claiming: >> >> *Error: Smarty template compile directory templates_c is not writable.* >> *Please make it writable.* >> *If you are using SELinux or AppArmor, you might need to adjust their >> setup to allow write access.* >>

I am trying to build an RPM for Apache-2.4.7-1 on Centos-6.5-i86_64. I am using mock. The are three build dependencies that I am trying to resolve. One, mod_socache_dc / distcache, I have simply removed from the spec file. The other two are arp and apr-utils. Since httpd-2.4.7 needs arp >= 1.4 I got the two latter requirements from http://www.apache.org/dist/httpd/httpd-2.4.7-deps.tar.bz2

Subject: How to Migrate Wordpress Website from 32-bit CentOS Linux 6.3 to 64-bit CentOS Linux 8.2 (2004) Author of this Guide: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL) Country: Singapore Date: 31 August 2020 Monday Singapore Time Type of Publication: Plain Text Document Version: 20200831.01 SECTION 1 Information Gathering Stage ===================================== Host

Having problems starting httpd & portmapper #service httpd start /usr/sbin/httpd: error while loading shared libraries: libm.so.6: cannot open shared object file: No such file or directory and I traced it to selinux, which I had just turned on for the first time: # sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode:

On 12/28/2016 05:11 AM, Todor Petkov wrote: > On Wed, Dec 28, 2016 at 5:18 AM, Robert Moskowitz <rgm at htt-consult.com> wrote: >> Which is why I wonder if there is some different config for the C7.3 version >> of apache. >> >> Or something with the C7-arm build... > Can you check for SELinux warnings/errors in /var/log/audit/audit.log? Good advice. As I

I am having issues with setting up my apache/mongrel cluster. I am using FC5, and i currently have 3 mongrels running on port 8000,8001, 8002. I am just testing my apache/mongrel deployment on my development machine and not online. I have apache 2.2.2, and my httpd.conf is pretty much the exact default after i yum installed apache 2.2.2. in my /etc/httdp/conf.d , i have myapp.conf, which

I know it is a configuration error. But i cannot figure it out. The server was working fine until a couple of days ago. it is now throwing: Forbidden You don't have permission to access / on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request. Apache/2.0.52 (CentOS) Server at BabyHydra.localdomain Port 80 Nothing

Hi, I'm trying to send Voice mails from my existing Windows application to an Asterisk system. I'm new to Asterisk and to VOIP. Could you please guide me with this? Regards, Shyamala -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20101108/3238c1d5/attachment.htm