F9 - SELinux, httpd and postgresql Security.F9 - SELinux, httpd and postgresql - FedoraForum.org Home Forums Posting Rules Linux Help Fedora Set-Up Guides Fedora News FedoraProject FedoraProject Links The Fedora Project Get Fedora Release Notes Installation Guide Communicate with Fedora The Documents Bug Reports Fedora Update System (Bohdi) Fedora Build System (Koji) Official Spins FedoraForum.org Fedora Support Security F9 - SELinux, httpd and postgresql FedoraForum Search User Name Remember Me? Password Forgot Password? Join Us! Register All Albums FAQ Today's Posts Search Security Let's be paranoid and secure our penguins. Google Search FedoraForum Search Red Hat Bugzilla Search Search Forums Show Threads Show Posts Tag Search Advanced Search Go to Page... Thread Tools Display Modes #1 18th May 2008, 03:48 AM thrombomodulin Offline Registered User Join Date: May 2005 Posts: 8 F9 - SELinux, httpd and postgresql Hello, I am looking for help to solve SELinux AVC denials when a cgi script connects to a postgresql database. I'm not sure how to tell SELinux to grant permission. First some relevant system information, note tnat httpd_can_network_connect and httpd_can_network_connect_db have both been set to 'on'. [root@myhost ~]# uname -a Linux myhost 2.6.25.3-18.fc9.i686 #1 SMP Tue May 13 05:38:53 EDT 2008 i686 i686 i386 GNU/Linux [root@myhost ~]# cat /etc/redhat-release Fedora release 9 (Sulphur) [root@myhost ~]# getsebool -a | grep ^h httpd_builtin_scripting -- on httpd_can_network_connect -- on httpd_can_network_connect_db -- on httpd_can_network_relay -- off httpd_can_sendmail -- off httpd_enable_cgi -- on httpd_enable_ftp_server -- off httpd_enable_homedirs -- on httpd_ssi_exec -- off httpd_tty_comm -- on httpd_unified -- on httpd_use_cifs -- off httpd_use_nfs -- off Now setup some logging... [root@myhost ~]# tail -n 0 -f /var/log/messages [2] 24622 SELinux enforcing is enabled [root@myhost ~]# setenforce 1 May 17 22:20:13 myhost kernel: type=1404 audit(1211077213.504:75): enforcing=1 old_enforcing=0 auid=0 ses...
