Se da un SELINUX=enforcing (pe care vreau sa-l las asa), un apache si un
script php care arata cam asa:


<?php
$ou="/bin/ping -c 1 -w 2 192.168.1.1";
$output=`$ou`;
echo $output;
?>

In browser nu arata nimic, in log-uri apare 

ping: icmp open socket: Permission denied

(log-ul lui httpd)

respectiv


avc:  denied  { create } for  pid=16921 comm="ping"
scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:system_r:httpd_t:s0 tclass=rawip_socket

in /var/log/messages


Clar e ceva de selinux.

Am facut 

httpd_can_network_connect --> on
httpd_ssi_exec --> on
httpd_enable_cgi --> on


Fara rezultat.

Mai departe ?
Help!

P.S. Astept o solutie cu setsebool si fratii lor. Sau.... altfel.

_______________________________________________
RLUG mailing list
RLUG@lists.lug.ro
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui