Re: SELinux configuration for web server.

Alain D D Williams <[email protected]>
Newsgroups gmane.linux.redhat.fedora.selinux
Organization Parliament Hill Computers Ltd
Message-ID <[email protected]>
On Sun, Jun 21, 2020 at 08:06:40PM +0000, Jason Long wrote:
> Hello,I want to install Apache, MySQL and PHP on CentOS 8, but I don't like to disable SELinux. I know that SELinux maybe cause some problems and I want to configure it to protect my system. Which SELinux configuration and commands I must run?I'm thankful if anyone share the experiences.

I have just done this.

What I did was to set the server up and run it and watch it fail - ie not be
able to do something because of a permissions failure. Look at /var/log/messages
and look for a line containing 'SELinux is preventing'

The line will have several #012 - replace these by newlines

That will give you a message that tells you what is wrong and suggestions of how
to fix the problem (you decide first if it is a problem and not something that
should be prevented!)

Sometimes the suggestion does not fix it, try another. This is the bit that I do
not like the most; it is not always obvious which of the fixes you should adopt;
then, maybe later, how to back out a fix that did not work or that you decided
was the wrong one.

I suggest keeping a log of these messages and what you did in response to it.

Good luck.

-- 
Alain Williams
Linux/GNU Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer.
+44 (0) 787 668 0256  https://www.phcomp.co.uk/
Parliament Hill Computers Ltd. Registration Information: https://www.phcomp.co.uk/Contact.html
#include <std_disclaimer.h>
_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.