note 68089 added to install.unix

From: Date: Wed, 12 Jul 2006 19:29:51 +0000
Subject: note 68089 added to install.unix
Groups: php.notes 
Request: Send a blank email to php-notes+get-114715@lists.php.net to get a copy of this message
When using Red Hat Fedora, beware of Security Enhanced Linux, SELinux. Quoted from Red Hat: "The security goal is to make sure that Apache HTTP is only reading the static Web content, and not doing anything else such as writing to the content, connecting to database sockets, reading user home directories, etc." These limitations include, among many other things, using mkdir to create directories, using fopen to access files, using fopen or get_headers to read URLs, or using exec to run external applications that happen to use sockets (or maybe access some files, but which will run fine when executed from the command line as Unix user apache or httpd -- such as HylaFAX "faxstat" as invoked from nweb2fax recvq.php and sendq.php). See /var/log/messages for any denials due to the SELinux policy. To disable it: - System, Administration, Security Level and Firewall - open the SELinux tab - click the Transition tree - check Disable SELinux protection for Apache HTTP - execute /etc/init.d/httpd restart See also http://fedora.redhat.com/docs/selinux-faq/ and http://php.net/results.php?q=selinux&p=wholesite ---- Server IP: 66.163.161.117 Probable Submitter: 213.84.208.155 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/install.unix.php Edit -- http://master.php.net/note/edit/68089 Del: integrated -- http://master.php.net/note/delete/68089/integrated Del: useless -- http://master.php.net/note/delete/68089/useless Del: bad code -- http://master.php.net/note/delete/68089/bad+code Del: spam -- http://master.php.net/note/delete/68089/spam Del: non-english -- http://master.php.net/note/delete/68089/non-english Del: in docs -- http://master.php.net/note/delete/68089/in+docs Del: other reasons-- http://master.php.net/note/delete/68089 Reject -- http://master.php.net/note/reject/68089 Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#114715) next »