[Bug 164992] New: Mod_proxy does not work with SElinux default policy

Joe Orton jorton at redhat.com
Wed Aug 3 13:45:07 UTC 2005


On Wed, Aug 03, 2005 at 09:41:43AM -0400, Daniel J Walsh wrote:
> Joe Orton wrote:
> >Expected Results:  I would expect the default policy to allow proxying and 
> >Message is not explicit and I had to search a long time to understand....
> >
> >Additional info:
> >
> > 
> >
> We could allow apache to connect to apache ports by default, if that 
> would satisfy this.

No, when mod_proxy is used as a generic HTTP proxy (a not entirely 
uncommon configuration) it needs to be able to connect to any remote 
port on any remote address.

joe




More information about the fedora-selinux-list mailing list