Run webapp/MoinMoin as a SELinux domain

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Per Sjoholm wrote:
> I would like to lock down different web apps run by httpd(apache).
> As it is today only way to let MoinMoin send email is to allow all to
> use sendmail.
> I use a db and that means that every application is allow to ...
> 
> Is it possible to have httpd confined and only open needed net resources
> for certain
> apps ?
> To use some form of m4 macro.
> /var/www/moin/xyx/cgi-bin/moin.cgi  ->  httpd-xyz_t
> /var/www/moin/xxx/cgi-bin/moin.cgi  ->  httpd-xxx_t
> 
Well you could write your own policy for the cgi yes.

system-config-selinux/polgengui makes this fairly easy.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHHPwWrlYvE4MpobMRAgLkAJ9hiTquSjtv5TdcPQerP6Mmsk1kLACgkt1M
NrUlW/XKy3wWO+ZPZ9VhEHA=
=UdbV
-----END PGP SIGNATURE-----