I just installed a fresh copy of the gentoo and figured I'd give selinux a shot and think that I have hammered out most of my issues, but have a quick question. I have selinux running in targeted/enforcing mode but for some reason apache is staying in the wrong context:
# ps fauxZ | grep apache2 unconfined_u:unconfined_r:unconfined_t root 7167 0.0 0.0 3836 572 pts/0 S+ 16:59 0:00 \_ grep --colour=auto apache2 user_u:system_r:initrc_t root 7153 0.0 0.0 152376 5912 ? Ss 16:55 0:00 /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start user_u:system_r:initrc_t apache 7155 0.0 0.0 152376 3784 ? S 16:55 0:00 \_ /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start user_u:system_r:initrc_t apache 7156 0.0 0.0 152376 3784 ? S 16:55 0:00 \_ /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start user_u:system_r:initrc_t apache 7157 0.0 0.0 152376 3784 ? S 16:55 0:00 \_ /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start user_u:system_r:initrc_t apache 7158 0.0 0.0 152376 3784 ? S 16:55 0:00 \_ /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start user_u:system_r:initrc_t apache 7159 0.0 0.0 152376 3784 ? S 16:55 0:00 \_ /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start The other services on the box start up in their proper context just fine, for example: # ps fauxZ | grep mysqld system_u:system_r:mysqld_t mysql 4100 0.0 0.0 214892 30996 ? Ssl 16:51 0:00 /usr/sbin/mysqld --defaults-file=/etc/mysql/my.cnf --basedir=/usr --datadir=/var/lib/mysql --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock I have the selinux-apache policy installed # semodule -l | grep apache apache 1.9.1 I'm sure its something stupid that I'm missing, but any suggestions? Thanks Jeff Rooney [email protected]
