Re: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...

2016-08-21 Thread Walter H.
On 20.08.2016 23:59, Jonathan Billings wrote: On Aug 20, 2016, at 15:00, Walter H. wrote: Hello, how could it be achieved to run e.g. shutdown -h now from a CGI script on a system where SELinux is set to ENFORCING? Short answer: don't. You could probably create a custom selinux policy that

Re: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...

2016-08-20 Thread Gordon Messmer
On 08/20/2016 12:00 PM, Walter H. wrote: how could it be achieved to run X from a CGI script on a system where SELinux is set to ENFORCING? https://www.centos.org/docs/5/html/Deployment_Guide-en-US/sec-sel-building-policy-module.html Set enforcing mode to "permissive". Run the program you w

Re: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...

2016-08-20 Thread Jonathan Billings
> On Aug 20, 2016, at 15:00, Walter H. wrote: > > Hello, > > how could it be achieved to run > e.g. > shutdown -h now > from a CGI script on a system where SELinux is set to ENFORCING? Short answer: don't. You could probably create a custom selinux policy that allowed it but you'd be openin

[CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...

2016-08-20 Thread Walter H.
Hello, how could it be achieved to run e.g. shutdown -h now from a CGI script on a system where SELinux is set to ENFORCING? Thanks Walter ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos