[Freeipa-devel] [PATCH] Make apache work with selinux

Karl MacMillan kmacmill at redhat.com
Tue Sep 25 19:10:48 UTC 2007


The default configuration of the apache selinux policy doesn't allow
apache to connect to the turbogears gui. This sets the correct
boolean to allow that connection.

Signed-off-by: User "Karl MacMillan <kmacmill at redhat.com>"
---

diff -r b1273ecc5164 -r 6e5bd8def365 ipa-server/ipa-install/ipa-server-install
--- a/ipa-server/ipa-install/ipa-server-install	Tue Sep 25 13:52:24 2007 -0400
+++ b/ipa-server/ipa-install/ipa-server-install	Tue Sep 25 15:09:01 2007 -0400
@@ -369,6 +369,9 @@ def main():
     ds.restart()
     krb.restart()
 
+    # Allow apache to connect to the turbogears web gui
+    run(["/usr/sbin/setsebool", "httpd_can_network", "true"])
+
     # Restart apache
     run(["/sbin/service", "httpd", "restart"])
 




More information about the Freeipa-devel mailing list