-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/02/2011 05:20 AM, Steve Searle wrote: > Around 07:49am on Saturday, July 02, 2011 (UK time), Jonathan Gardner > scrawled: > >> I build websites for a living. I'd like to get /usr/sbin/httpd running >> as a regular user. I've setup a directory with a simple httpd.conf on >> my F15 install. When it starts up, I get a single message in the error >> log: >> >> [Fri Jul 01 23:36:53 2011] [notice] SELinux policy enabled; httpd >> running as context >> unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 >> >> I've poked at Google for a while but I don't see a way to tune SELinux >> to allow myself to run httpd. Any pointers? Turning SELinux off is an >> option, but I'd rather learn more about how SELinux really works so >> that I can take advantage of its benefits. > > Try running the following: > > # sealert -a /var/log/audit/audit.log > > Look through the output for a section refering to the relevant errors - > you may want to pipe the output through less or sent it to a file that > you can browse. > > In the relevant section there may be an "Allowing Access:" sub-section > which will give you the relevant commands. > > I am no SELinux expert, but like you wanted to make it work for me, and > have found this method has solved the issues I have had (so far). > > Hope it helps. > > Steve > >
This message is not telling you there is a problem. It is just telling the context that the apache server is running as. If it runs as a system process it should be running as httpd_t, if it is started by the normal user, it will run as unconfined_t. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk4THqEACgkQrlYvE4MpobO67wCdH+W2Io9GESiMlx5HpJFt9MOe lJMAoM9wjntxWMd8tjS3tHPgnhyA9o9H =VTfb -----END PGP SIGNATURE----- -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
