note 68090 deleted from ref.exec by crell

Note Submitter: Arjan van Bentem ---- When using Red Hat Fedora, beware of Security Enhanced Linux, SELinux. Quoted from Red Hat: "The security goal is to make sure that Apache HTTP is only reading the static Web content, and not doing anything else such as writing to the content, connecting to database sockets, reading user home directories, etc." These limitations include, among many other things, using exec to run external applications that happen to use sockets (or maybe access some files) such as HylaFAX "faxstat" as invoked from nweb2fax recvq.php and sendq.php. For debugging, one could try running such commands using PHP Shell (see http://mgeisler.net/php-shell/) which might fail while execution from the real command line (as Unix user apache or httpd) yields no problem whatsoever. See /var/log/messages for any denials due to the SELinux policy. To disable it: - System, Administration, Security Level and Firewall - open the SELinux tab - click the Transition tree - check Disable SELinux protection for Apache HTTP - execute /etc/init.d/httpd restart See also http://fedora.redhat.com/docs/selinux-faq/ and http://php.net/results.php?q=selinux&p=wholesite