note 68090 added to ref.exec
| From: | ArjanvanBentem at osu1 dot php dot net | Date: | Wed, 12 Jul 2006 19:38:27 +0000 |
| Subject: | note 68090 added to ref.exec | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-114716@lists.php.net to get a copy of this message | ||
When using Red Hat Fedora, beware of Security Enhanced Linux, SELinux.
Quoted from Red Hat: "The security goal is to make sure that Apache HTTP is only reading the
static Web content, and not doing anything else such as writing to the content, connecting to
database sockets, reading user home directories, etc."
These limitations include, among many other things, using exec to run external applications that
happen to use sockets (or maybe access some files) such as HylaFAX "faxstat" as invoked
from nweb2fax recvq.php and sendq.php.
For debugging, one could try running such commands using PHP Shell (see http://mgeisler.net/php-shell/) which might fail while
execution from the real command line (as Unix user apache or httpd) yields no problem whatsoever.
See /var/log/messages for any denials due to the SELinux policy. To disable it:
- System, Administration, Security Level and Firewall
- open the SELinux tab
- click the Transition tree
- check Disable SELinux protection for Apache HTTP
- execute /etc/init.d/httpd restart
See also http://fedora.redhat.com/docs/selinux-faq/ and
http://php.net/results.php?q=selinux&p=wholesite
----
Server IP: 83.137.20.120
Probable Submitter: 213.84.208.155
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/ref.exec.php
Edit -- http://master.php.net/note/edit/68090
Del: integrated -- http://master.php.net/note/delete/68090/integrated
Del: useless -- http://master.php.net/note/delete/68090/useless
Del: bad code -- http://master.php.net/note/delete/68090/bad+code
Del: spam -- http://master.php.net/note/delete/68090/spam
Del: non-english -- http://master.php.net/note/delete/68090/non-english
Del: in docs -- http://master.php.net/note/delete/68090/in+docs
Del: other reasons-- http://master.php.net/note/delete/68090
Reject -- http://master.php.net/note/reject/68090
Search -- http://master.php.net/manage/user-notes.php