Gentoo Archives: gentoo-hardened

From: Chris PeBenito <pebenito@g.o>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] apache2 selinux
Date: Fri, 20 Mar 2009 13:06:16
Message-Id: 1237554359.3346.3.camel@defiant.pebenito.net
In Reply to: [gentoo-hardened] apache2 selinux by Jeff Rooney
1 On Thu, 2009-03-19 at 17:02 -0500, Jeff Rooney wrote:
2 > I just installed a fresh copy of the gentoo and figured I'd give selinux a shot and think that I have hammered out most of my issues, but have a quick question. I have selinux running in targeted/enforcing mode but for some reason apache is staying in the wrong context:
3 >
4 > # ps fauxZ | grep apache2
5 > unconfined_u:unconfined_r:unconfined_t root 7167 0.0 0.0 3836 572 pts/0 S+ 16:59 0:00 \_ grep --colour=auto apache2
6 > user_u:system_r:initrc_t root 7153 0.0 0.0 152376 5912 ? Ss 16:55 0:00 /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start
7
8 Is /usr/sbin/apache2 httpd_exec_t? If not then `rlpkg apache` and try
9 again.
10
11 --
12 Chris PeBenito
13 <pebenito@g.o>
14 Developer,
15 Hardened Gentoo Linux
16
17 Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
18 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] apache2 selinux Jeff Rooney <jtrooney@×××××××××.com>