4

Selinux prevents apache to run script that call bash script inside. How to fix?

view full story
linux-howto

http://unix.stackexchange.com – I have linux with SELinux and got problems I have apache that has VHOST that runs API.PHP script that internally implement shell calls to bash scripts like this: private function getRepoList(){ exec("/home/www/sites/hgcrm.saritasa.com/mercurial/get-repo-list.sh",$retval); } when I turn off SELinux - everything is working fine, but when I turn it on then a. It stops working, it seems no access to bash scripts anymore b. /var/messages has these lines: Feb 26 03:58:19 LinuxMercurialRepo setroubleshoot: SELinux is preventing /usr/bin/sudo from using the sys_resource capability. For c (HowTos)

Songlist's picture
Submitted by Songlist on 02/26/2012 – Made popular on 02/26/2012

Stories similar to Selinux prevents apache to run script that call bash script inside. How to fix?

I have linux with SELinux and got problems

I have apache that has VHOST that runs API.PHP script that internally implement shell calls to bash scripts like this:

private function getRepoList(){ exec("/home/www/sites/hgcrm.saritasa.com/mercurial/get-repo-list.sh",$retval); }

when I turn off SELinux - everything is working fine, but when I turn it on then

a.

Hello,

I have 2 machines with dovecot and SElinux installed. One is x86_64 the other one is armv6l. They have the same dovecot configuration.

On the x86_64 one, dovecot runs with no problem.

I'm trying to configure SELinux on a Red Hat Enterprise Linux 6.2 web server that runs Apache 2.2.15 and Perl 5.10.1, and connects to remote Oracle databases. The Oracle 11.2g client is installed. The PHP scripts that access Oracle are working, but the Perl scripts are not.

I have a php script that generates an selinux avc denial when it tries to exec a bash script.

Here is the alert:

Code: SELinux is preventing /usr/bin/bash from execute access on the file /opt/cps/rcm/upsample. ... You can generate a local policy module to dontaudit this access. Do # grep /usr/bin/bash /var/log/audit/audit.log | audit2allow -D -M mypol # semodule -i mypol.pp ... S

SeLinux - The fun never ends. 24 weeks 12 hours ago

So we're supposed to be able to understand SeLinux? Over the last few days while using Fedora 18 Beta I've been seeing some SeLinux warnings while doing system wide searches. While I've been able to handle SeLinux issues on my own (for the most part) this proposed solution baffles me.

I have a bash script which runs a set of php scripts. When it runs it takes an hour and pegs the CPU at 95-99%. This causes our lamp stack (mainly the apache process) problems and our website on the same server starts spitting out timeout or 500 errors.

We have CentOS 6 configured with SELinux to host a number of websites.

F18 and SELinux 19 weeks 4 days ago

Greetings,

I've installed F18 TC4 and it's running pretty well, with the exception of a SELinux issue that I can't resolve, probably due to the fact that I've never had any previous SELinux problems and I know nothing about it.

Anyway, it's the printer driver that is generating the error and the troubleshooting tips don't help.

I'm following the Debian SELinux setup guide with my Linux Mint Debian Edition system. I installed the necessary packages:

sudo aptitude install selinux-basics selinux-policy-default selinux-utils policycoreutils

Activated SELinux and rebooted twice:

sudo selinux-activate

Checked the installation.