Apache Mysql Security Enhanced ( SE ) problem
Posted: Mon Mar 07, 2005 2:45 pm
situation summary:
got Fedora Core 3, Apache MySQL and PHP; cannot take SE off of Apache but may make hole for MySQL.
Security Enhancemetn inherintly stops Apache from talking to MySQL and there is no premade policy to override this. like there is with the other things it stops (cgi, ssi, and a few others)
I have used the fedora page to make sure you have things set up right to get to the point that Apache and Mysql and PHP all work, and so does FC3
http://fedora.redhat.com/docs/selinux-apache-fc3/
that says to make a custom policy for letting MySQL through, but nothing about how to write a policy. I cant find a good policy tutorial and am hoping someone here can help me figure out how to get a policy that would let Apache and MySQL to talk
got Fedora Core 3, Apache MySQL and PHP; cannot take SE off of Apache but may make hole for MySQL.
Security Enhancemetn inherintly stops Apache from talking to MySQL and there is no premade policy to override this. like there is with the other things it stops (cgi, ssi, and a few others)
I have used the fedora page to make sure you have things set up right to get to the point that Apache and Mysql and PHP all work, and so does FC3
http://fedora.redhat.com/docs/selinux-apache-fc3/
that says to make a custom policy for letting MySQL through, but nothing about how to write a policy. I cant find a good policy tutorial and am hoping someone here can help me figure out how to get a policy that would let Apache and MySQL to talk