Re: mj2 install on CentOS 6 - cgi access issues (selinux?)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--199BB99sIe9GlfnvUmL94SpBGBTwD71Br
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 1/4/16 10:18 PM, Richard Welty wrote:

> what i need to do to get it working is set the selinux context to
> httpd_sys_content_t for apparently any bit of perl that might
> get called upon. what isn't clear is whether that will break lots
> of other stuff, like the shell interface or the email interface.

> there may be a bigger hammer available.

bigger hammer applied. there is a script available which can
process the AVC messages from an selinux audit log and
produce an selinux policy module that can then be installed
to resolve the issues. the procedure for CentOS 6 (and
presumably for any other RHEL derived linux) is here:

https://wiki.centos.org/HowTos/SELinux#head-faa96b3fdd922004cdb988c1989e5=
6191c257c01

the actual policy module can vary depending on installation
choices so i'm not going to share it, it will undoubtedly be
wrong for most other installations.

richard

--=20
[email protected]
 Averill Park Networking - GIS & IT Consulting
 OpenStreetMap - PostgreSQL - Linux
 Java - Web Applications - Search



--199BB99sIe9GlfnvUmL94SpBGBTwD71Br
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=WlBt
-----END PGP SIGNATURE-----

--199BB99sIe9GlfnvUmL94SpBGBTwD71Br--