[ale] Apache

[Lightner, Jeff]

Ditto.

Unfortunately to get your RHCT or RHCE you have to learn SELinux and in
training it doesn't "seem" that difficult.

I'm not sure I agree with the "false sense of security" statement
someone else made though.   RedHat talks about "security in layers" in
their training and SELinux is only one component of that.  I believe it
has value if you can take the time to work out how to use it properly
and get your organization on board with using it.  I'm guessing if you
used it all the time it would become second nature like chown and chmod
are for most of us.

However, having had to go through a battle royale just to implement sudo
and iptables I'm pretty sure the political ramifications of SELinux on
top of the PITA administration tasks related to it would be enough to
make me finally go off the deep end.  


-----Original Message-----
From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of
Thompson Freeman
Sent: Wednesday, February 17, 2010 8:46 AM
To: Atlanta Linux Enthusiasts - Yes! We run Linux!
Subject: Re: [ale] Apache

No, you are not.

On 02/16/2010 06:59:58 PM, Jerald Sheets wrote:
> So am I the only person that despises SELinux with every
> fiber of his being?
> 
> --j
> 
> 
> 
> On Feb 16, 2010, at 5:05 PM, Terry Bailey wrote:
> 
> > Hi,
> >
> > I just loaded CentOS 5.4 into a server.  The web page
> will not come
> > up.  So I cleaned out the error log and tried it once.
> At that
> > point, error_log had the following data.
> >
> > [Tue Feb 16 15:31:23 2010] [notice] SELinux policy
> enabled; httpd
> > running as context user_u:system_r:httpd_t:s0
> > [Tue Feb 16 15:31:23 2010] [notice] suEXEC mechanism
> enabled
> > (wrapper: /usr/sbin/suexec)
> > [Tue Feb 16 15:31:23 2010] [notice] Digest: generating
> secret for
> > digest authentication ...
> > [Tue Feb 16 15:31:23 2010] [notice] Digest: done
> > [Tue Feb 16 15:31:23 2010] [notice] Apache/2.2.3
> (CentOS) configured
> > -- resuming normal operation
> >
> >
> >
> > It looks like it has something to do with SELinux.  The
> httpd.conf
> > file says that Apache is running as apache.
> >
> > Any help would be appreciated.
> >
> > Thanks,
> >
> > Terry Bailey
> >
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
> 
> 

_______________________________________________
Ale mailing list
Ale at ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
 
Proud partner. Susan G. Komen for the Cure.
 
Please consider our environment before printing this e-mail or attachments.
----------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------