Selinux with Apache running PHP

[Jayendren Anand Maduray]

great!

God bless.


Daniel J Walsh wrote:

> Jayendren Anand Maduray wrote:
>
>>
>> Good day all.
>>
>> I am having trouble running PHP files in my webserver: Apache.
>>
>> Here is some information:
>>
>> [root at shiva warez]# rpm -qi php
>> Name        : php                          Relocations: (not 
>> relocatable)
>> Version     : 4.3.11                            Vendor: Red Hat, Inc.
>> Release     : 2.7                           Build Date: Thu 25 Aug 
>> 2005 11:26:47 SAST
>> Install Date: Thu 03 Nov 2005 13:51:24 SAST      Build Host: 
>> tweety.build.redhat.com
>> Group       : Development/Languages         Source RPM: 
>> php-4.3.11-2.7.src.rpm
>> Size        : 3373100                          License: The PHP License
>> Signature   : DSA/SHA1, Thu 25 Aug 2005 18:02:04 SAST, Key ID 
>> b44269d04f2a6fd2
>> Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
>> URL         : http://www.php.net/
>> Summary     : The PHP HTML-embedded scripting language. (PHP: 
>> Hypertext Preprocessor)
>>
>> [root at shiva warez]# rpm -qi httpd
>> Name        : httpd                        Relocations: (not 
>> relocatable)
>> Version     : 2.0.52                            Vendor: Red Hat, Inc.
>> Release     : 3.1                           Build Date: Thu 11 Nov 
>> 2004 17:39:18 SAST
>> Install Date: Fri 22 Apr 2005 08:37:05 SAST      Build Host: 
>> dolly.build.redhat.com
>> Group       : System Environment/Daemons    Source RPM: 
>> httpd-2.0.52-3.1.src.rpm
>> Size        : 2407431                          License: Apache 
>> Software License
>> Signature   : DSA/SHA1, Fri 12 Nov 2004 22:58:01 SAST, Key ID 
>> b44269d04f2a6fd2
>> Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
>> URL         : http://httpd.apache.org/
>> Summary     : The httpd Web server
>>
>> [root at shiva warez]# uname -a
>> Linux shiva 2.6.9-1.667smp #1 SMP Tue Nov 2 14:59:52 EST 2004 i686 
>> i686 i386 GNU/Linux
>>
>> SElinux is running in enforcing mode, and I have disabled protection 
>> for apache.
>>
>> I am trying to setup PHP Nuke on my webserver, but it has trouble 
>> running PHP files.
>>
>> Also tried the following from the fedora-forum:
>>
>> changed permissions of the php files: chmod 755 *.php
>> turning off SELinux protection, which works of course.
>>
>> But I like SELinux!!!
>>
>> Please advise.
>>
> avc messages should be being created some where.  Most likely you have 
> a problem with labeleing of the directory where php-Nuke is installed.
>
> http://fedora.redhat.com/docs/selinux-apache-fc3/
>
> Has a great explanation of how to setup apache with SELinux.
>
>

-- 
Jayendren Anand Maduray
Microsoft Certified Professional
Network Plus
IT Administrator

Perinatal HIV Research Unit
Wits Health Consortium
University of the Witwatersrand

Old Potch Road
Chris Hani Baragwanath Hospital
Soweto
South Africa

Tel: +27 11 989 9776
Tel: +27 11 989 9999
Fax: +27 11 938 3973
Cel: 082 22 774 94

Alternate email address: jayendren at mweb.co.za