note 68089 added to install.unix
| From: | ArjanvanBentem at osu1 dot php dot net | Date: | Wed, 12 Jul 2006 19:29:51 +0000 |
| Subject: | note 68089 added to install.unix | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-114715@lists.php.net to get a copy of this message | ||
When using Red Hat Fedora, beware of Security Enhanced Linux, SELinux.
Quoted from Red Hat: "The security goal is to make sure that Apache HTTP is only reading the
static Web content, and not doing anything else such as writing to the content, connecting to
database sockets, reading user home directories, etc."
These limitations include, among many other things, using mkdir to create directories, using fopen
to access files, using fopen or get_headers to read URLs, or using exec to run external applications
that happen to use sockets (or maybe access some files, but which will run fine when executed from
the command line as Unix user apache or httpd -- such as HylaFAX "faxstat" as invoked from
nweb2fax recvq.php and sendq.php).
See /var/log/messages for any denials due to the SELinux policy. To disable it:
- System, Administration, Security Level and Firewall
- open the SELinux tab
- click the Transition tree
- check Disable SELinux protection for Apache HTTP
- execute /etc/init.d/httpd restart
See also http://fedora.redhat.com/docs/selinux-faq/ and
http://php.net/results.php?q=selinux&p=wholesite
----
Server IP: 66.163.161.117
Probable Submitter: 213.84.208.155
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/install.unix.php
Edit -- http://master.php.net/note/edit/68089
Del: integrated -- http://master.php.net/note/delete/68089/integrated
Del: useless -- http://master.php.net/note/delete/68089/useless
Del: bad code -- http://master.php.net/note/delete/68089/bad+code
Del: spam -- http://master.php.net/note/delete/68089/spam
Del: non-english -- http://master.php.net/note/delete/68089/non-english
Del: in docs -- http://master.php.net/note/delete/68089/in+docs
Del: other reasons-- http://master.php.net/note/delete/68089
Reject -- http://master.php.net/note/reject/68089
Search -- http://master.php.net/manage/user-notes.php