note 68090 added to ref.exec

From: Date: Wed, 12 Jul 2006 19:38:27 +0000
Subject: note 68090 added to ref.exec
Groups: php.notes 
Request: Send a blank email to php-notes+get-114716@lists.php.net to get a copy of this message
When using Red Hat Fedora, beware of Security Enhanced Linux, SELinux. Quoted from Red Hat: "The security goal is to make sure that Apache HTTP is only reading the static Web content, and not doing anything else such as writing to the content, connecting to database sockets, reading user home directories, etc." These limitations include, among many other things, using exec to run external applications that happen to use sockets (or maybe access some files) such as HylaFAX "faxstat" as invoked from nweb2fax recvq.php and sendq.php. For debugging, one could try running such commands using PHP Shell (see http://mgeisler.net/php-shell/) which might fail while execution from the real command line (as Unix user apache or httpd) yields no problem whatsoever. See /var/log/messages for any denials due to the SELinux policy. To disable it: - System, Administration, Security Level and Firewall - open the SELinux tab - click the Transition tree - check Disable SELinux protection for Apache HTTP - execute /etc/init.d/httpd restart See also http://fedora.redhat.com/docs/selinux-faq/ and http://php.net/results.php?q=selinux&p=wholesite ---- Server IP: 83.137.20.120 Probable Submitter: 213.84.208.155 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/ref.exec.php Edit -- http://master.php.net/note/edit/68090 Del: integrated -- http://master.php.net/note/delete/68090/integrated Del: useless -- http://master.php.net/note/delete/68090/useless Del: bad code -- http://master.php.net/note/delete/68090/bad+code Del: spam -- http://master.php.net/note/delete/68090/spam Del: non-english -- http://master.php.net/note/delete/68090/non-english Del: in docs -- http://master.php.net/note/delete/68090/in+docs Del: other reasons-- http://master.php.net/note/delete/68090 Reject -- http://master.php.net/note/reject/68090 Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#114716) next »