Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
Re: fedora-selinux-list Digest, Vol 18, Issue 9: msg#00061
|
Subject: |
Re: fedora-selinux-list Digest, Vol 18, Issue 9 |
Joe Orton wrote:
On Tue, Aug 09, 2005 at 10:35:54AM -0400, John Griffiths wrote:
Joe Orton wrote:
The above all represent important functionality.
Agreed.
I'm not convinced that the security vs usability tradeoff is being won
in favour of enabling the boolean by default.
I don't quite understand this sentence. Are you saying the boolean should
be enabled by default? We certainly need the functionality. When security
gets in the way of getting the job done, then we have lost the war.
Sorry, I inverted the logic! I'm arguing that the
httpd_can_network_connect boolean should be enabled by default, yes.
joe
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
How about I add
# allow httpd to connect to mysql/posgresql databases
allow httpd_t { postgresql_port_t mysqld_port_t }:tcp_socket name_connect;
can_ldap(httpd_t)
By default and leave the boolean off?
Dan
--
|
| |
