selinux June 2020

selinux@lists.fedoraproject.org

4 participants
2 discussions

lnk_file read permission
by Gionatan Danti 31 Jul '20

31 Jul '20

Hi all, using selinux, I saw many times that when relocating service dirs (eg: mysql, mongodb, etc) putting a symlink in the original location, the affected services fail to start due to missing lnk_file read permission. As selinux works with target file label and it is path-agnostic (this is, indeed, a major selinux feature), while is the lnk_file read often not granted by default? Does granting it expose to additional attack vectors? Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it [1] email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

3 8

SELinux configuration for web server.
by Jason Long 22 Jun '20

22 Jun '20

Hello,I want to install Apache, MySQL and PHP on CentOS 8, but I don't like to disable SELinux. I know that SELinux maybe cause some problems and I want to configure it to protect my system. Which SELinux configuration and commands I must run?I'm thankful if anyone share the experiences. Thank you Sent from Yahoo Mail on Android

4 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

selinux June 2020