Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 17/18 > Security and Privacy
FedoraForum Search

Forgot Password? Join Us!

Security and Privacy Sadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 6th January 2007, 02:36 AM
shams Offline
Registered User
 
Join Date: Oct 2004
Posts: 881
Exclamation SELinux prevent to open the local web server?

hi,
i runing local web server in fc6 with apache, SELinux don't let to open the web server the error is 403:
Forbidden:
you don't have permission to open / in this server.

the DocumentRoot is /home/jaan/www/html and permissions are as:
drwxr-xr-x jaan jaan user_u:object_r:httpd_sys_content_t www

i already run this commmand from home:
restorecon -r www

this is the selinuxtoubleshoot message:
Summary:
SELinux is preventing the /usr/sbin/httpd from using potentially mislabeled files mibs (usr_t).
Detailed Description:
SELinux has denied the /usr/sbin/httpd access to potentially mislabeled files mibs. This means that SELinux will not allow http to use these files. Many third party apps install html files in directories that SELinux policy can not predict. These directories have to be labeled with a file context which httpd can accesss.
Allowing Access:
If you want to change the file context of mibs so that the httpd daemon can access it, you need to execute it using chcon -t httpd_sys_content_t.mibs. You can look at the httpd_selinux man page for additional information.

Source Contextsystem_u:system_r:httpd_tTarget Contextsystem_u:object_r:usr_t
Target Objectsmibs [ dir ]
Affected RPM Packages httpd-2.2.3-5 [application]
Policy RPM selinux-policy-2.3.18-10
Selinux Enabled True
when i run the:
chcon -t httpd_sys_content_t.mibs
this is the error:
$ chcon -t httpd_sys_content_t.mibs
chcon: too few arguments
Try `chcon --help' for more information.
any one can help please?
__________________
Want to share my experiences with other newbies:
Fedora For Newbies
Some Debian Tips
Reply With Quote
  #2  
Old 7th January 2007, 02:13 AM
Jman Offline
Registered User
 
Join Date: Mar 2004
Location: Minnesota, USA
Age: 27
Posts: 7,909
There's a random dot in there that doesn't seem to belong. Plus you have to run it as root. And let's throw in an -R to recursively apply it to the whole directory.
Code:
chcon -R -t httpd_sys_content_t mibs
Reply With Quote
Reply

Tags
local, open, prevent, selinux, server, web

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
new glibc update make selinux prevent qemu-kvm to run mmix Security and Privacy 6 13th August 2009 06:43 PM
how to prevent firefox with SELinux liori909 Security and Privacy 2 11th May 2009 10:58 PM
SELinux prevent the httpd daemon to start? shams Servers & Networking 3 13th November 2006 12:27 AM
How to Prevent "Setting hardware clock to local time" orbert Using Fedora 7 10th June 2005 02:51 PM
Prevent X11 or local terminal login kojak Security and Privacy 1 7th December 2004 11:20 PM


Current GMT-time: 05:28 (Sunday, 19-05-2013)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat