Displaying 20 results from an estimated 3000 matches similar to: "Any SELinux gurus around?"
2017 Feb 21
3
SELInux conflict with Postfixadmin
postfixadmin setup.php is claiming:
*Error: Smarty template compile directory templates_c is not writable.*
*Please make it writable.*
*If you are using SELinux or AppArmor, you might need to adjust their
setup to allow write access.*
This goes away with 'setenforce 0', so it is an SELinux issue. I have
tried both:
restorecon -Rv /usr/share/postfixadmin
and
chcon -R -t
2011 Aug 11
19
Intel 320 as ZIL?
Are any of you using the Intel 320 as ZIL? It''s MLC based, but I
understand its wear and performance characteristics can be bumped up
significantly by increasing the overprovisioning to 20% (dropping
usable capacity to 80%).
Anyone have experience with this?
Ray
2008 May 20
4
awstats, webalizer or...
So what does everyone out there use to generate web statistics these
days? Are the tried and true awstats or webalizer still the best out
there?
Ray
2017 Feb 21
2
SELInux conflict with Postfixadmin
On 02/21/2017 11:46 AM, Zdenek Sedlak wrote:
> On 2017-02-21 17:30, Robert Moskowitz wrote:
>> postfixadmin setup.php is claiming:
>>
>> *Error: Smarty template compile directory templates_c is not writable.*
>> *Please make it writable.*
>> *If you are using SELinux or AppArmor, you might need to adjust their
>> setup to allow write access.*
>>
2010 Mar 23
4
Moving drives around...
Kind of a newbie question here -- or I haven''t been able to find great
search terms for this...
Does ZFS recognize zpool members based on drive serial number or some
other unique, drive-associated ID? Or is it based off the drive''s
location (c0t0d0, etc).
I''m wondering because I have a zpool set up across a bunch of drives
and I am planning to move those drives to
2012 Jan 11
3
Unable to allocate dma memory for extra SGL
Hi all;
We have a Solaris 10 U9 x86 instance running on Silicon Mechanics /
SuperMicro hardware.
Occasionally under high load (ZFS scrub for example), the box becomes
non-responsive (it continues to respond to ping but nothing else works
-- not even the local console). Our only solution is to hard reset
after which everything comes up normally.
Logs are showing the following:
Jan 8
2011 May 10
5
Tuning disk failure detection?
We recently had a disk fail on one of our whitebox (SuperMicro) ZFS
arrays (Solaris 10 U9).
The disk began throwing errors like this:
May 5 04:33:44 dev-zfs4 scsi: [ID 243001 kern.warning] WARNING: /pci at 0,0/pci8086,3410 at 9/pci15d9,400 at 0 (mpt_sas0):
May 5 04:33:44 dev-zfs4 mptsas_handle_event_sync: IOCStatus=0x8000, IOCLogInfo=0x31110610
And errors for the drive were
2011 Oct 24
1
ZFS in front of MD3000i
We''re setting up ZFS in front of an MD3000i (and attached MD1000
expansion trays).
The rule of thumb is to let ZFS manage all of the disks, so we wanted
to expose each MD3000i spindle via a JBOD mode of some sort.
Unfortunately, it doesn''t look like the MD3000i this (though this[1]
post seems to reference an Enhanced JBOD mode....), so we decided to
create a whole bunch of
2011 Aug 31
1
Understanding UID/GID mapping models.
I am using either DOMAIN or ADS for authentication and am trying to
understand how UID/GID mapping rules are triggered.
This[1] seems to suggest that if I do not specify the idmap uid/gid
parameters in smb.conf, then authenticated usernames are mapped to
"local" user accounts having the same name.
If, however, I _do_ specify idmap uid/gid then one of the idmap_*
allocator modules is
2006 Nov 06
2
FC6 and winbind separator ignored?
I'm trying to join my FC6 box to our Active Directory domain. For the most
part the setup was pretty straightforward, but it just doesn't seem like
winbind separator is being honored.
When I do a 'getent passwd' I get the following:
AVWORLD\johnXXXX:*:16782801:16777216:XXXXXXXX:/home/AVWORLD/johnXXXX:/bin/bash
2015 Jan 22
2
SELinux permissions for apache
Hey all,
I have a simple php app working that writes some info to a text file. The
app will only work correctly if SELinux is disabled. If it's enabled and
try to use the app, it fails. It seems that SELinux is denying the app
ability to write to the text file.
So I tried running the following command:
chcon -R -t httpd_sys_content_t /var/www
And tried veriying the command with the
2017 Sep 04
5
selinux denial of cgi script with httpd using ssl
Thanks for your help.
I did pick up an additional entry in the audit file :
type=AVC msg=audit(1504561395.709:10196): avc: denied { execute } for
pid=19163 comm="/usr/sbin/httpd" name="s.check.cgi" dev="dm-0"
ino=537182029 scontext=system_u:system_r:httpd_t:s0
tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=file
Unfortunately, I am not sure how the
2009 Sep 14
4
Contribution to wiki: nagios incompatibility with centos 5.2
Hi
I would like to contribute to the wiki.centos.org:
username: boel
subject: nagios incompatibility with centos 5.2
location: http://wiki.centos.org/HowTos/Nagios
content: A security feature of centos 5.2 SELinux prevents the access
from the apache httpd server to the needed /var/nagios files. The error
manifests itself in the /var/log/messages as "SELinux is preventing the
tac.cgi from
2015 Jan 22
2
SELinux permissions for apache
Hey Jeremy,
> Have you tried changing the folder where it's writing into with these
> lables? httpd_sys_content_rw_t or httpd_user_content_rw_t
Adding 'rw' to the command did the trick. I tried httpd_sys_content_rw_t and
that works fine! Thanks for the tip!
Tim
On Thu, Jan 22, 2015 at 1:19 PM, Jeremy Hoel <jthoel at gmail.com> wrote:
> Have you tried changing
2006 Apr 19
3
Apache and '(13)Permission denied: access to ...'
I'm attempting to install Hobbit and at the point of web access via
Apache.
The error_log states:
(13)Permission denied: access to /hobbit denied
I've tried a number of things and am still getting this:
1) /hobbit is located in /home/hobbit/server/www
2) Made sure all files are in the apache group
3) I've even chcon
2007 Jun 10
1
Problems with UserDir directive on CentOS 5
Hi,
I'm currently setting up a local LAMP server to test various apps.
Starting from the out-of-the-box configuration of Apache, I test it, and
it's OK: http://localhost shows Apache's default page OK in Firefox.
Now I edit /etc/httpd/conf/httpd.conf and replace 'UserDir disabled' by
'UserDir public_html'.
I restart Apache.
Then, as a normal user (kikinovak):
$
2005 Mar 10
7
Problem with apache in CentOS 4.0 (final)
Hi everyone!
In my new CentOS 4.0 (final ;-) I installed apache and activates
SELinux, When I
tried to enter a page of some user (localhost/~user) said to me that she
did not have permissions
to see it, and this was incorrect, because the permissions was 755
(/home/user/html). After awhile it was happened to me to deactivate
selinux and
I reinitiated the machine and I work!
Somebody knows why
2015 Jan 22
2
SELinux permissions for apache
>
> The easiest answer is to edit the Selinux config file. By default it is
> set to enforce, which really locks it down.
> cd /etc/selinux
> edit the config file and change SELUNIX=enforcing to SELUNIX=permissive
> Save the file and restart httpd, you should be fine..
Yeah dude, exactly. Except I actually do want to start using it. I've been
disabling SELINUX forever
2011 Apr 11
5
Best configuration for /var/www/html/
For a long period of time, my Apache root directory has been
/home/httpd. For security reasons, this is not so good as
SELinux has informed me. Now all of the files have been copied
to /var/www/etc with owner and group "root". The privileges are
754 (rwxr-xr--), however apache does not have access to them.
Should the owner be apache? Group?
Todd
--
Ariste Software
Petaluma,
2015 Feb 17
2
Windows Admin user can't change Permission.
Hello.
According to the "https://wiki.samba.org/index.php/Setup_and_configure_file_shares_with_Windows_ACLs", I run my Samba share but can't add permission to directory via admin user or other users that are administrator.
My samba config is :
[global]
workgroup = JASONDOMAIN
security = ADS
realm = JASONDOMAINI.JJ
netbios name = printmah
dedicated keytab file = /etc/krb5.keytab