Wouldn't a requisite of using selinux be to learn how it works first instead of blindly following a how-to so when it breaks you're able to function to fix it? I've been using qmailadmin since about 1998 and have never had an issue with it security-wise.
Just my $0.02CAD :) ----- Original Message ----- From: D. Hilbig <[EMAIL PROTECTED]> To: [email protected] <[email protected]> Sent: Sat May 03 12:45:41 2008 Subject: RE: [qmailadmin] qmailadmin/apache how-to ??? Since it is a public webserver and SELinux is an additional layer of security I would prefer not to disable it. I guess it might be time to learn more about SELinux. I was hoping that someone has already written a document on what needs to be changed. Oh well... -----Original Message----- From: Maurizio Rottin [mailto:[EMAIL PROTECTED] Sent: Saturday, May 03, 2008 5:16 AM To: [email protected] Subject: Re: [qmailadmin] qmailadmin/apache how-to ??? there two way to make it work! one is configure selinux with new rules, the other one is disable selinux. to disable selinux do #setenforce 0 then edit /etc/selinux.conf??? don't remember where the file is..and chenge in "disable" so that in the next reboot selinux won't come up again. 2008/5/3 D. Hilbig <[EMAIL PROTECTED]>: > > Yes. I get the login screen, but cannot login. > > Here are the error messages: > > May 2 23:25:57 server setroubleshoot: > SELinux is preventing the /var/www/cgi-bin/qmailadmin from using potentially > mislabeled files cdb (var_t). > For complete SELinux messages. run sealert -l > 1ec6bf27-c839-4063-a36f-bc80e2872bc2 > > May 2 23:25:57 server setroubleshoot: > SELinux is preventing the /var/www/cgi-bin/qmailadmin from using potentially > mislabeled files (etc). > For complete SELinux messages. run sealert -l > 9a4c375d-6ec9-4cce-82a4-50b21f1c8b58 > > > > > -----Original Message----- > From: ed [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 01, 2008 1:35 PM > To: [email protected] > Subject: Re: [qmailadmin] qmailadmin/apache how-to ??? > > > On Wed, 30 Apr 2008 15:14:41 -0700 > "D. Hilbig" <[EMAIL PROTECTED]> wrote: > > > Where can I find a good how-to for configuring qmailadmin under > > apache? I'd like a document that provides some technical insights > > with respect to the apache configuration including any security > > concerns. I'm also wondering about an possible issues with SELinux > > in targeted mode. I'm using CentOS v5.1 with apache v2.2.3. Any > > help is appreciated. > > > > > > > > > > > Do you have a problem with the configuration at the moment? > > -- > The 14.4 dialup to the PS2 is losing cohesion because of a trailing > space in /etc/passwd. The Sys Admin is ordering a pizza. > :: http://www.s5h.net/ :: http://www.s5h.net/gpg.html > > > > > -- mr !DSPAM:481cc1bc120508759915645!
