SELinux newbie

Daniel J Walsh dwalsh at redhat.com
Tue Jan 15 14:29:23 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Steven Stern wrote:
> On 01/15/2008 07:34 AM, Sietjp wrote:
> |
> | Hi all,
> | Sorry for this newbie post.
> | I'm running fedora 8 and lamp.
> | All is wroking fine except of emails. Apache is not able to send
> emails via
> | sendmail.
> |
> | I tried setenforce 0, and then all is working fine.
> |
> | But as I'm not a lazy guy, I would like to keep SELInux active and
> understand
> | what is giong wrong.
> |
> | Please help :)
> | I don't ask for the solution but maybe a starting point or a link, thx :)
> |
> | JP
> |
> setsebool -P httpd_can_network_connect=1
> 
> If you run with the gui active for a while, the SELinux Troubleshooter
> will pop up with this answer.  It can also be run from APPLICATIONS ->
> SYSTEM TOOLS.
> 

httpd_can_sendmail, only opens the mail ports for connections,
can_network_connect opens any port.
- --
fedora-selinux-list mailing list
fedora-selinux-list at redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkeMw0MACgkQrlYvE4MpobMvywCcCK+cREffBCBDM5HBDzXQH22F
Vf0An36aV0/RoSP9oF6MYjaeydCNiHIN
=rVlJ
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list