Tuesday, October 9, 2012

SELinux REMINDERS

I set a Linux WEB with remote mysql server that I need to enable SELinux for PCI Requirement.


created a separate Document ROOT for the web files.

/web/files

#Command below will set the context and becomes accessible via web
semanage fcontext -a -f "" -t httpd_sys_content_t '/web/files(/.*)?'
restorecon -RFvv /web/files


#Allow HTTPD scripts and modules to connect to the network using TCP.
setsebool -P httpd_can_network_connect 1


#Allow HTTPD scripts and modules to connect to databases over the network.
setsebool -P httpd_can_network_connect_db 1