Virtual Architects Support Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Security Enhanced Linux ======

http://www.crypt.gen.nz/selinux/disable_selinux.html

http://wiki.centos.org/HowTos/SELinux

<file>
ls -Z

ps axZ
</file>

Example:

<file>
ls -Z /var/log/BackupPC/

restorecon -R -v /var/log/BackupPC

system_u:object_r:var_log_t

chcon -Rv -t httpd_sys_content_t /var/log/BackupPC
</file>

BackupPC mailing list says it should be:

<file>
system_u:object_r:httpd_sys_content_t:s0
</file>

===== Disable selinux =====

Edit the config file and set to ''disabled'':

<file>
sed -i 's/enforcing/disabled/g' /etc/selinux/config /etc/selinux/config

setenforce 0
</file>

===== NFS =====

http://serverfault.com/questions/554659/selinux-contexts-with-nfs-shares

For a NFS mounted web folder (i.e. a folder writable by the Apache web server in /var/www/html/), edit the ''/etc/fstab'' mount options:

<file>
vim /etc/fstab
</file>

<file>
# Mount the NFS data store
ip.of.nfs.srv:/path/to/share    /var/www/html/folder_name/  nfs  _netdev,context="system_u:object_r:httpd_sys_rw_content_t:s0"  0 0
</file>

Virtual Architects Support Wiki

User Tools

Site Tools

Page Tools