Re: SELinux Preventing Web Access to apcupsd multimon.cgi

2009-03-20 Thread Rick Bilonick

On Thu, 2009-03-19 at 13:55 -0700, Rick Stevens wrote:
> Rick Bilonick wrote:
> > I'm using SELinux set to enforcing. apcaccess works
> > fine and I can see the output from the ups. I have port 3551 tcp opened
> > in the firewall (I think I need this to get the connection to the ups)
> > and have the Apache web server enabled. I can access the web page from
> > other computers and run multimon.cgi - it displays the table headers but
> > won't display the ups info. It gives an error: 
> > 
> > Not available: upsfetch: tcp-open failed for 127.0.0.1 port 3551
> > 
> > I've checked SELINUX troubleshooter and it's definitely multimon.cgi
> > interacting with httpd. I tried following what the troubleshooter said
> > to make a new policy but I cannot get it to work. There is no /tmp/avc
> > directory. Any ideas on how to fix this?
> 
> IIRC, "# setsebool httpd_enable_cgi on" does the trick.
> --
> - Rick Stevens, Systems Engineer  ri...@nerd.com -
> - AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
> --
> - Grabel's Law: 2 is not equal to 3--not even for large values of 2. -
> --
> 

Thanks. I did as you said, but it still didn't work because I need one
addition thing. When checking another system I realized that I also
needed to open port 3551 udp (in addition to tcp). So then is worked.
Thanks for your help.

Rick B.

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: SELinux Preventing Web Access to apcupsd multimon.cgi

2009-03-19 Thread Rick Stevens

Rick Bilonick wrote:

I'm using SELinux set to enforcing. apcaccess works
fine and I can see the output from the ups. I have port 3551 tcp opened
in the firewall (I think I need this to get the connection to the ups)
and have the Apache web server enabled. I can access the web page from
other computers and run multimon.cgi - it displays the table headers but
won't display the ups info. It gives an error: 


Not available: upsfetch: tcp-open failed for 127.0.0.1 port 3551

I've checked SELINUX troubleshooter and it's definitely multimon.cgi
interacting with httpd. I tried following what the troubleshooter said
to make a new policy but I cannot get it to work. There is no /tmp/avc
directory. Any ideas on how to fix this?


IIRC, "# setsebool httpd_enable_cgi on" does the trick.
--
- Rick Stevens, Systems Engineer  ri...@nerd.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
- Grabel's Law: 2 is not equal to 3--not even for large values of 2. -
--

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines