Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
Re: Running httpd scripts from nfs mounts?: msg#00227
|
Subject: |
Re: Running httpd scripts from nfs mounts? |
Stephen Smalley wrote:
On Thu, 2005-01-27 at 11:25, John W. Lockhart wrote:
Aha! It is indeed mounted nosuid:
rw,nosuid,nodev,noatime,rsize=8192,wsize=8192,bg,intr,soft,context=system_u:object_r:httpd_sys_content_t
Not clear you want to just remove nosuid, as that obviously has other
security implications. If policy allowed httpd_t to set its exec
context, then you could use a wrapper script that just does a runcon -t
httpd_sys_script_t <realscript> to manually transition to the new
domain.
For now, since the nfs server contains trusted materials, I got rid of the
nosuid. Got a little farther, but hit:
kernel: audit(1106858631.779:0): avc: denied { search } for pid=22886
exe=/usr/bin/perl name=mnt dev=dm-0 ino=3932161
scontext=root:system_r:httpd_sys_script_t tcontext=system_u:object_r:mnt_t
tclass=dir
-- John
|
| |
