Re: mj2 install on CentOS 6 - cgi access issues (selinux?)

Richard Welty <[email protected]> Mon, 4 Jan 2016 22:18:10 -0500
Newsgroups gmane.mail.majordomo.majordomo2.devel
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--JBnasbO8brFMFILnDUh1VTiiRLmbL0fwO
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 1/4/16 9:25 PM, Richard Welty wrote:
> On 1/4/16 9:17 PM, Richard Welty wrote:
>> ok, i tried switching selinux to permissive mode and no change in beha=
vior,
>> so selinux is not the problem. i poked around and discovered a dumb ap=
ache
>> config problem, and fixed it. now it is attempting to execute the scri=
pt and
>> getting an internal server error page. the apache error log contains t=
he
>> following:
>>
>> [Mon Jan 04 21:14:32 2016] [error] [client 74.70.243.84] Premature end=

>> of script headers: mj_confirm
>>
> actually, i got to thinking that selinux might be back in play here and=

> i was
> right - it works properly with selinux in permissive mode but not in
> enforcing
> mode.
>
what i need to do to get it working is set the selinux context to
httpd_sys_content_t for apparently any bit of perl that might get
called upon. what isn't clear is whether that will break lots of other
stuff, like the shell interface or the email interface.

there may be a bigger hammer available.

richard

--=20
[email protected]
 Averill Park Networking - GIS & IT Consulting
 OpenStreetMap - PostgreSQL - Linux
 Java - Web Applications - Search



--JBnasbO8brFMFILnDUh1VTiiRLmbL0fwO
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=ZOpq
-----END PGP SIGNATURE-----

--JBnasbO8brFMFILnDUh1VTiiRLmbL0fwO--