apache mod_jk

Marko Bauhardt marko.bauhardt at web.de
Wed Jul 20 19:30:25 UTC 2005


Hello all,
i have a question about selinux and apache/mod_jk.
I use Fedora Core 3.
The apache runs flawless (The files in /var/www/html are available).

But the connection to the tomcat dont work. The debug output in 
/var/log/messages:
audit(1121888291.180:0): avc:  denied  { connect } for  pid=3388 
exe=/usr/sbin/httpd scontext=root:system_r:httpd_t 
tcontext=root:system_r:httpd_t tclass=tcp_socket

if i turned off the selinux with "setenforce 0",the jsps in the tomcat 
are available. But i think this is a bad workaround to set the enforce 
to 0. If i execute "setenforce 1" the connection to the tomcat fails. 
Exist another solution to connect the apache with the tomcat?

Must i use the command chcon for the files in my tomcat?




More information about the fedora-selinux-list mailing list