On Thu, 2009-03-19 at 17:02 -0500, Jeff Rooney wrote: > I just installed a fresh copy of the gentoo and figured I'd give selinux a > shot and think that I have hammered out most of my issues, but have a quick > question. I have selinux running in targeted/enforcing mode but for some > reason apache is staying in the wrong context: > > # ps fauxZ | grep apache2 > unconfined_u:unconfined_r:unconfined_t root 7167 0.0 0.0 3836 572 pts/0 > S+ 16:59 0:00 \_ grep --colour=auto apache2 > user_u:system_r:initrc_t root 7153 0.0 0.0 152376 5912 ? > Ss 16:55 0:00 /usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D LANGUAGE -D > PHP5 -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf -k start
Is /usr/sbin/apache2 httpd_exec_t? If not then `rlpkg apache` and try again. -- Chris PeBenito <[email protected]> Developer, Hardened Gentoo Linux Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243
signature.asc
Description: This is a digitally signed message part
