We run many Library / web / database applications on RedHat servers with SELinux enabled. Sometimes it takes a bit of investigation and horsing around but I haven't yet found a situation where it had to be disabled. setsebool and chcon can solve most problems and SELinux is an excellent enhancement to standard filesystem and ACL security.


Graham Stewart
Network and Storage Services Manager, Information Technology Services
University of Toronto Library
130 St. George Street
Toronto, Ontario        graham.stew...@utoronto.ca
Canada M5S 1A5 Phone: 416-978-6337 | Mobile: 416-550-2806 | Fax: 416-978-1668

Ken Irwin wrote:
Hi all,

Thanks for your extensive suggestions and comments. A few folks suggested that 
SELinux might be the issue. Tobin's suggestion to change one of the settings 
proved effective:
"# setsebool -P httpd_can_network_connect 1".

Thanks to everyone who helped -- I learned a lot.


-----Original Message-----
From: Code for Libraries [mailto:code4...@listserv.nd.edu] On Behalf Of Greg 
Sent: Tuesday, November 24, 2009 10:04 AM
Subject: Re: [CODE4LIB] calling another webpage within CGI script


I had a similar problem a while back which was solved by disabling SELinux. http://www.crypt.gen.nz/selinux/disable_selinux.html


Reply via email to