All of lore.kernel.org
 help / color / mirror / Atom feed
From: Scott Cain <cain@cshl.org>
To: selinux@tycho.nsa.gov
Subject: FC3, Apache and CGI web app
Date: Wed, 02 Feb 2005 16:07:41 -0500	[thread overview]
Message-ID: <1107378461.3351.62.camel@localhost.localdomain> (raw)

Hello,

I am one of the authors of a web application that is widely used in my
community, GBrowse ( http://www.gmod.org/ggb/ ).  We've started
receiving bug reports from users who are trying to install and run it on
Fedora Core 3 systems with SELinux installed and enabled with the
default values from the distribution.  

To do some testing, I've installed FC3 and GBrowse and run into the same
problems.  The only way I've been able to get GBrowse to run is to
disable SELinux.  There are a few reasons I'd rather not tell my users
to do that, so I am looking for a way to leave SELinux enabled and still
run GBrowse.  The first thing I tried was to set httpd_disable_trans=1
(which the GUI calls "Disable SELinux protection for httpd daemon"), but
that doesn't help.  Are there any parameters that I can add
to /etc/selinux/targeted/booleans to allow GBrowse to work?

As far as I can tell, the reason SELinux doesn't like GBrowse is that it
is a cgi that tries to read a directory and files in the apache conf
directory.

Thanks,
Scott

-- 
------------------------------------------------------------------------
Scott Cain, Ph. D.                                         cain@cshl.org
GMOD Coordinator (http://www.gmod.org/)                     216-392-3087
Cold Spring Harbor Laboratory


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

             reply	other threads:[~2005-02-02 21:10 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-02-02 21:07 Scott Cain [this message]
2005-02-02 23:46 ` FC3, Apache and CGI web app Daniel J Walsh
2005-02-03  4:30   ` Scott Cain
2005-02-03 14:51     ` Daniel J Walsh
2005-02-03 15:25       ` Scott Cain
2005-02-03 15:35         ` Daniel J Walsh
2005-02-03 15:48           ` Scott Cain
2005-02-03 15:52             ` Stephen Smalley
2005-02-03 15:59             ` Daniel J Walsh
2005-02-03 16:01               ` Scott Cain
2005-02-03 16:11                 ` Daniel J Walsh
2005-02-03 16:57                   ` Scott Cain
2005-02-03  3:01 ` Colin Walters

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1107378461.3351.62.camel@localhost.localdomain \
    --to=cain@cshl.org \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.