|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21585/root/usr/share/setroubleshoot/plugins/ |
Upload File : |
mò
¡8Hc @ s[ d k Z e i d d d e ƒi Z d k Td k l Z d k Z d e f d „ ƒ YZ d S( Ns setroubleshoot-pluginss /usr/share/localet fallback( t *( s Plugint pluginc B sD t Z e d ƒ Z e d ƒ Z e d ƒ Z d Z d „ Z d „ Z RS( Ns?
SELinux prevented httpd $ACCESS access to http files.
sX
SELinux prevented httpd $ACCESS access to http files.
Ordinarily httpd is allowed full access to all files labeled with http file
context. This machine has a tightened security policy with the $BOOLEAN
turned off, this requires explicit labeling of all files. If a file is
a cgi script it needs to be labeled with httpd_TYPE_script_exec_t in order
to be executed. If it is read-only content, it needs to be labeled
httpd_TYPE_content_t, it is writable content. it needs to be labeled
httpd_TYPE_script_rw_t or httpd_TYPE_script_ra_t. You can use the
chcon command to change these contexts. Please refer to the man page
"man httpd_selinux" or
<a href="http://fedora.redhat.com/docs/selinux-apache-fc3">FAQ</a>
"TYPE" refers to one of "sys", "user" or "staff" or potentially other
script types.
sg
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1"
s setsebool -P $BOOLEAN=1c C s! t i | t ƒ | i d ƒ d S( Ni7 ( t Plugint __init__t selft __name__t set_priority( R ( ( t2 /usr/share/setroubleshoot/plugins/httpd_unified.pyR 9 s c C sl | i d d g ƒ oR| i d g ƒ o?| i d d g ƒ o)| i d d d g ƒ oH | i d d
d d ƒ | i | t d
ƒ | i | i
| i | i ƒ Sn | i | i
| i ƒ oH | i d d
d d ƒ | i | t d
ƒ | i | i
| i | i ƒ Sn | i | i | i ƒ oH | i d d
d d ƒ | i | t d
ƒ | i | i
| i | i ƒ Sqhn d S( Nt httpd_ts httpd_.*_script_ts httpd_.*tt filet dirt executet execute_no_transt
transitiont BOOLEANt
httpd_unifiedt ACCESSt executings
Web Servert readings reading and writing( t avct matches_source_typest matches_target_typest
has_tclass_int all_accesses_are_int set_template_substitutionsR t reportt _t summaryt problem_descriptiont fix_descriptiont fix_cmdt r_file_permst r_dir_permst create_file_permst rw_dir_permst None( R R ( ( R t analyze= s"