User Tools

Site Tools


computing:linux:selinux

Security Enhanced Linux

http://www.crypt.gen.nz/selinux/disable_selinux.html

http://wiki.centos.org/HowTos/SELinux

ls -Z

ps axZ

Example:

ls -Z /var/log/BackupPC/

restorecon -R -v /var/log/BackupPC

system_u:object_r:var_log_t

chcon -Rv -t httpd_sys_content_t /var/log/BackupPC

BackupPC mailing list says it should be:

system_u:object_r:httpd_sys_content_t:s0

Disable selinux

Edit the config file and set to disabled:

sed -i 's/enforcing/disabled/g' /etc/selinux/config /etc/selinux/config

setenforce 0

NFS

http://serverfault.com/questions/554659/selinux-contexts-with-nfs-shares

For a NFS mounted web folder (i.e. a folder writable by the Apache web server in /var/www/html/), edit the /etc/fstab mount options:

vim /etc/fstab
# Mount the NFS data store
ip.of.nfs.srv:/path/to/share    /var/www/html/folder_name/  nfs  _netdev,context="system_u:object_r:httpd_sys_rw_content_t:s0"  0 0
computing/linux/selinux.txt · Last modified: 2014/11/22 17:29 by gcooper