Ask Your Question

nepr's profile - activity

2013-10-01 00:49:01 -0500 received badge  Student (source)
2013-08-07 06:17:15 -0500 received badge  Notable Question (source)
2013-08-07 06:17:15 -0500 received badge  Famous Question (source)
2013-08-07 06:17:15 -0500 received badge  Popular Question (source)
2012-03-19 20:10:05 -0500 commented answer can't set httpd_suexec_disable_trans

Thanks for your help. I'll look further into this in light of your suggestions when I get back to things SELinux and suexec. Right now, they are both a bit of overkill for my little single user system, but I do want to, eventually, adapt to rather than avoid them.

2012-03-18 17:48:12 -0500 received badge  Editor (source)
2012-03-18 17:32:55 -0500 asked a question can't set httpd_suexec_disable_trans

Just installed FC16, trying to get httpd to execute scripts from my home directory (I'm the only user of this machine) with SELinux active. I've gotten to the point where httpd (Apache 2.2) is complaining about suexec. SELinux alert follows:

SELinux is preventing /usr/sbin/suexec from using the dac_override capability

Suggestions from the web (including Fedora docs for earlier releases) say to set httpdsuexecdisable_trans. But...

[root@NorvMaster nepr]# setsebool -P httpdsuexecdisabletrans 1 libsemanage.dbasellistset: record not found in the database libsemanage.dbasellistset: could not set record value Could not change boolean httpdsuexecdisabletrans Could not change policy booleans

getsebool list does not show an httpdsuexecdisabletrans entry. I can't find anything about how to do what httpdsuexecdisabletrans 1 would, presumably, do.

I'm about to turn SELinux off, so this isn't urgent; just a feeble attempt on my part to do what's, again presumably, right.