similar to: Reset booleans to default value ?

I'm setting up a dedicated database server, and since this will be a central service to my various web servers I wanted it to be as secure as possible...so I am leaving SELinux enabled. However I'm having trouble getting Apache to use mod_auth_pam. I also now can't get setroubleshootd working to send me notifications of the denials and provide tips to solve the problem. The Apache

Hello, I'm using the latest CentOS with phpBB 3.0.x + postgreSQL + sendmail (relayed through gmail.com) - all those programs working fine, with no big modifications of the CentOS defaults (i.e. SELinux is on). Now I'm struggling with the seemingly simple problem, that when I put an .html file into /var/www/html/ then Apache won't serve it. In the browser I see: "Forbidden You

> Am 18.06.2020 um 23:18 schrieb Jay Hart: >>> Am 18.06.2020 um 22:37 schrieb Jay Hart: >>>>> On Thu, 18 Jun 2020 16:11:01 -0400 >>>>> Jay Hart wrote: >>>>> >>>>>> Any suggestions???? >>>>> selinux issue? >>>> I turned the firewall off and tried to access /webmail and the configtest file, Turning

---------------------------- Original Message ---------------------------- Subject: Re: [HEADS UP] Default value of SELinux boolean httpd_graceful_shutdown will changed. From: "Lukas Vrabec" <lvrabec at redhat.com> Date: Fri, September 29, 2017 10:26 To: devel at lists.fedoraproject.org "Selinux List at Fedora Project" <selinux at

On Tue, 12 Apr 2016, John Jasen wrote: > On 04/12/2016 02:31 PM, James Hogarth wrote: >> For example: >> >> unless => "/usr/sbin/getsebool httpd_can_network_connect | /usr/bin/grep on >> &> /dev/null" > > D'oh! That's what I get for overcomplicating the whole darn thing. :) >> >> Incidentally one nice trick if you're

> On Thu, 18 Jun 2020 16:11:01 -0400 > Jay Hart wrote: > >> Any suggestions???? > > selinux issue? I turned the firewall off and tried to access /webmail and the configtest file, Turning off the firewall resulted in same issue. > > I have this in my squirrelmail notes for Centos 6, maybe this is a similar issue for you on Centos 8: > > After configuring

On 29/01/16 16:35, reynierpm at gmail.com wrote: > I have Apache/2.4.6 installed in a minimal CentOS 7 VM. I am trying to > access the default page when Apache is installed by accessing the CentOS IP > as http://192.168.3.130 (is a host only interface) but I got "This webpage > is not available: ERR_CONNECTION_TIMED_OUT" and I can't find why. I have > stopped iptables

On Thu, 18 Jun 2020 16:11:01 -0400 Jay Hart wrote: > Any suggestions???? selinux issue? I have this in my squirrelmail notes for Centos 6, maybe this is a similar issue for you on Centos 8: After configuring squirrelmail, do this to make selinux accept squirrelmail connections: setsebool -P httpd_can_network_connect 1 (The -P makes it permanent across reboots. This command takes quite a

Le 23/05/2018 ? 16:58, m.roth at 5-cent.us a ?crit?: > A suggestion: once you've got the firewall issue dealt with, set selinux > into permissive mode; *then* you can figure out what it's complaining > about, while at the same time, your system will be available. Once you've > fixed those issues, then you can make it enforcing. This is always my approach. Turns out the

On 04/12/2016 02:31 PM, James Hogarth wrote: > For example: > > unless => "/usr/sbin/getsebool httpd_can_network_connect | /usr/bin/grep on > &> /dev/null" D'oh! That's what I get for overcomplicating the whole darn thing. :) > > Incidentally one nice trick if you're dealing with potentially changing > multiple booleans and the policy compile

> type=AVC msg=audit(1482944350.289:339): avc: denied { read } for pid=2141 comm="httpd" name="family" dev="sda3" ino=262199 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=dir permissive=0 I ran into the same problem, I think. I ran "audit2why" and passed in the AVC. It suggested a pair of booleans

On 12 Apr 2016 6:10 p.m., "John Jasen" <jjasen at realityfailure.org> wrote: > > Out of faint curiosity, how do we push change requests upstream to RHEL? > > I'm using puppet to automate systems, including the application of > SELinux policy. While setsebool -P is non-damaging to repeat, it is time > consuming -- taking about 45 seconds per execution to

CentOS Errata and Bugfix Advisory 2013:0465 Upstream details at : https://rhn.redhat.com/errata/RHBA-2013-0465.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9714a977ad8f6dc0a25a05d86afe65de8a7edd158dc030dfa1a4e239f0527e44 libsemanage-2.0.43-4.2.el6.i686.rpm

I want you all to see what I went through trying to simply reassign (unsuccessfully) the context of a well-known port. To the best of my ability to recall none of the packages mentioned below are even installed on the host in question. Why are these dependices preventing me from removing a disused SELinux policy. I have done exactly that, reassign port contexts, in the past without encountering

CentOS Errata and Bugfix Advisory 2017:0075 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0075.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f3fa41fab7bd48a8078f7a5768f40872c429217b13ff3fcad3a2348b3b332fef libsemanage-2.5-5.1.el7_3.i686.rpm

Hi, I have read: http://lists.centos.org/pipermail/centos/2005-March/003429.html, http://fedora.redhat.com/docs/selinux-apache-fc3/sn-using-other-types.html RedHat Selinux Documentation (PDF) (some parts) and they helped me solve a some difficulties, including the necessity to mount /var/www with -o suid. Now I'm getting these 2 errors in /var/log/messages whenever I execute a cgi:

On Thu, Mar 18, 2010 at 6:05 PM, Aleksey Tsalolikhin <atsaloli.tech at gmail.com> wrote: > CentOS release 5.4 (Final) > > I run pppd on this system, it accepts dial-in connections, logs people > in over ssh/sftp. > > I had selinux disabled on this system originally, but I recently > enabled it, and selinux > is blocking this pppd service. > > "audit2allow

I am migrating to sql server 2000 from postgres and I have tried char(1), int, tinyint and bit datatypes to replace booleans, but without luck. the 1''s and 0''s are stored properly in the db, but checkboxes and dropdowns are not being auto-populated in rails. Anyone experience this before? thanx -- View this message in context:

This is my selinux conf. # Authors: Jason Tang <jtang at tresys.com> # # Copyright (C) 2004-2005 Tresys Technology, LLC # #  This library is free software; you can redistribute it and/or #  modify it under the terms of the GNU Lesser General Public #  License as published by the Free Software Foundation; either #  version 2.1 of the License, or (at your option) any later version. # #  This

Witch your suggest the my problem persisted Il 29/01/2019 12:06, L.P.H. van Belle via samba ha scritto: > In addition to Rowlands answer. > > About . > [samba] > path = /samba/ > > What are the rights on /samba/ ? > My guess here, the rights on /samba does not allow you to set rights on that and subfolders. > > I also suggest, if you share a folder share a subfolder