My guess is that you need to change the label of the validate program. You
might try this:
chcon -t chkpwd_exec_t /usr/sbin/validate
Next question is whether or not apache can make that domain transition. Its an
easy experiment to find out. Do the above chcon and try it. If that doesn't
work, you can reset the label with "restorecon /usr/sbin/validate".
FYI, this doesn't work. Apache cannot make this domain transition as
you suspected.
Scott
_______________________________________________
rhelv5-list mailing list
rhelv5-list@redhat.com
https://www.redhat.com/mailman/listinfo/rhelv5-list
