Dear piler users,
I bet that some (or most?) of you disable selinux when it comes to
installing piler.
However today I managed to make it work piler and selinux together.
Firstly, enable some predefined rules:
setsebool -P httpd_can_network_connect on
setsebool -P httpd_ssi_exec on
# in case you use single sign on
setsebool -P allow_httpd_mod_auth_ntlm_winbind on
Secondly, create a selinux module, eg. a file, let's call it piler.te
module piler 1.0;
require {
type public_content_t;
type devlog_t;
type kernel_t;
type httpd_sys_script_t;
type httpd_t;
type var_t;
class sock_file write;
class unix_dgram_socket sendto;
class file { read execute open getattr };
}
#============= httpd_sys_script_t ==============
allow httpd_sys_script_t var_t:file { getattr open read };
allow httpd_t var_t:file getattr;
Then compile the module, and finally load it:
checkmodule -M -m -o piler.mod piler.te
semodule_package -o piler.pp -m piler.mod
semodule -i piler.pp
So if any of you uses selinux (redhat, centos, ...), please try
enforcing selinux,
and see if the piler gui works with the above stuff.
Janos
