On 03/18/2011 12:02 PM, Sorin Vijelie wrote:
> Se da un SELINUX=enforcing (pe care vreau sa-l las asa), un apache si un
> script php care arata cam asa:
>
>
> <?php
> $ou="/bin/ping -c 1 -w 2 192.168.1.1";
> $output=`$ou`;
> echo $output;
> ?>
>
> In browser nu arata nimic, in log-uri apare
>
> ping: icmp open socket: Permission denied
>
> (log-ul lui httpd)
>
> respectiv
>
>
> avc: denied { create } for pid=16921 comm="ping"
> scontext=system_u:system_r:httpd_t:s0
> tcontext=system_u:system_r:httpd_t:s0 tclass=rawip_socket
>
> in /var/log/messages
>
>
> Clar e ceva de selinux.
>
> Am facut
>
> httpd_can_network_connect --> on
> httpd_ssi_exec --> on
> httpd_enable_cgi --> on
>
>
> Fara rezultat.
>
> Mai departe ?
> Help!
>
> P.S. Astept o solutie cu setsebool si fratii lor. Sau.... altfel.
http://wiki.centos.org/HowTos/SELinux#head-faa96b3fdd922004cdb988c1989e56191c257c01
_______________________________________________
RLUG mailing list
RLUG@lists.lug.ro
http://lists.lug.ro/mailman/listinfo/rlug
