Re: mj2 install on CentOS 6 - cgi access issues (selinux?)

Richard Welty <[email protected]> Sat, 2 Jan 2016 23:23:44 -0500
Newsgroups gmane.mail.majordomo.majordomo2.devel
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--QXpOaWcsV3TTUC6q03XRMeJPW6jjo2cCA
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 1/2/16 10:42 PM, John R. Levine wrote:
>> [Sat Jan 02 16:34:10 2016] [error] [client 74.70.243.84] mod_mime_magi=
c:
>> can't read `/web/krusty/bin/mj_confirm'
>
> That should be a symlink to /usr/local/majordomo/bin/mj_confirm or
> wherever your mj installation is.  The file it's pointing to is a
> setuid binary that just switches to the mj userid and runs the
> .mj_confirm perl script.
right. i had to set a specific selinux context on the symlink and on
some of the other
stuff to get to this point. but there's still something squirrely with
the permissions and/or
the selinux context. since i'm not seeing selinux audit log messages, i
presume it's not
breaking things right this minute.

richard

--=20
[email protected]
 Averill Park Networking - GIS & IT Consulting
 OpenStreetMap - PostgreSQL - Linux
 Java - Web Applications - Search



--QXpOaWcsV3TTUC6q03XRMeJPW6jjo2cCA
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=VEKb
-----END PGP SIGNATURE-----

--QXpOaWcsV3TTUC6q03XRMeJPW6jjo2cCA--