[nlug] SELinux

2011-02-23 Thread Terry Trapp
I have recently been brought back from the Dark Side™ to administer some Linux boxen. Something that has changed in my absence is that SELinux is now enabled by default and appears to have a fairly prohibitive default policy. (On CentOS) I would like to draw on the group's experience and know

Re: [nlug] SELinux

2011-02-23 Thread David R. Wilson
Hello Terry, I have also had battles with SELinux. Much of the time loosing the battle. There are usually some complaints in the logs that can be used to modify rules. I have also been using the Apache module mod_security. I ended up some time ago disabling SELinux (on Fedora 14). On Centos I

Re: [nlug] SELinux

2011-02-23 Thread John R. Dennison
On Wed, Feb 23, 2011 at 08:09:41AM -0800, Terry Trapp wrote: I have recently been brought back from the Dark Side™ to administer some Linux boxen. Something that has changed in my absence is that SELinux is now enabled by default and appears to have a fairly prohibitive default policy. (On