[Bug 501228] New: Review Request: mod_selinux - An apache module to launch web applications with restrictive privileges

bugzilla at redhat.com bugzilla at redhat.com
Mon May 18 07:16:14 UTC 2009


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.

Summary: Review Request: mod_selinux - An apache module to launch web applications with restrictive privileges

https://bugzilla.redhat.com/show_bug.cgi?id=501228

           Summary: Review Request: mod_selinux - An apache module to
                    launch web applications with restrictive privileges
           Product: Fedora
           Version: rawhide
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: medium
          Priority: medium
         Component: Package Review
        AssignedTo: nobody at fedoraproject.org
        ReportedBy: kaigai at kaigai.gr.jp
         QAContact: extras-qa at fedoraproject.org
                CC: notting at redhat.com, fedora-package-review at redhat.com
   Estimated Hours: 0.0
    Classification: Fedora


Spec URL: http://sepgsql.googlecode.com/files/mod_selinux.spec_v2.2.1903
SRPM URL:
http://sepgsql.googlecode.com/files/mod_selinux-2.2.1903-1.fc11.src.rpm

Description:
The Apache/SELinux plus is an extra module (mod_selinux.so) which enables
to launch contents-handler (it means both of references to static contents
and invocations of web applications) with individual and restrictive
privileges set, based on http authentication.
The mod_selinux.so generates a one-time worker thread for each request,
and it assigns the worker restrictive domain based on the authentication
prior to launching contents handlers.
It means we can apply valid access controls on web-applications, and
makes assurance operating system can prevent violated accesses, even if
web application contains security bugs or vulnerabilities.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.




More information about the Fedora-package-review mailing list