Confusion about transition when httpd_t process calls sendmail

Paul Howarth paul at city-fan.org
Fri Sep 18 19:41:50 UTC 2009


On Fri, 18 Sep 2009 11:23:40 -0500
Jason L Tibbitts III <tibbs at math.uh.edu> wrote:

> >>>>> "PH" == Paul Howarth <paul at city-fan.org> writes:
> 
> PH> Just a thought but is your httpd_can_sendmail boolean still set?
> 
> Well, crap, it's off.  I thought setting booleans was supposed to be
> permanent, but I guess you have to pass a flag and I suppose I might
> not have.  Is there a way to check if any currently set booleans are
> not set permanently?

I think permanently set booleans are recorded
in /etc/selinux/targeted/modules/active/booleans.local but I may be
wrong about that.

You need to use setsebool -P to set them permanently.

Paul.




More information about the fedora-selinux-list mailing list