+
6gu c sx ^ RI t ] P ! RRR7 t]P t^ RIt^ RIHt ! R R]4 tR# )i Nzsetroubleshoot-pluginsT)Zfallback)Pluginc s a ] tR t^ t o ]! R4 t]! R4 t]! R4 tRt]! R4 t ]! R4 t
Rt R t R t
R
tV tR # ) pluginz?
SELinux prevented httpd $ACCESS access to http files.
aZ
SELinux prevented httpd $ACCESS access to http files.
Ordinarily httpd is allowed full access to all files labeled with http file
context. This machine has a tightened security policy with the $BOOLEAN
turned off, this requires explicit labeling of all files. If a file is
a cgi script it needs to be labeled with httpd_TYPE_script_exec_t in order
to be executed. If it is read only content, it needs to be labeled
httpd_TYPE_content_t. If it is writable content, it needs to be labeled
httpd_TYPE_script_rw_t or httpd_TYPE_script_ra_t. You can use the
chcon command to change these context. Please refer to the man page
"man httpd_selinux" or
FAQ
"TYPE" refers to one of "sys", "user" or "staff" or potentially other
script types.
zg
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1"
zsetsebool -P $BOOLEAN=1zcIf you want to allow httpd to execute cgi scripts and to unify HTTPD handling of all content files.z_you must tell SELinux about this by enabling the 'httpd_unified' and 'http_enable_cgi' booleansz1# setsebool -P httpd_unified=1 httpd_enable_cgi=1c s^ \ P ! V \ 4 V P ^4 R# )i N)r __init____name__Z set_priority)selfs &2/usr/share/setroubleshoot/plugins/httpd_unified.pyr Zplugin.__init__= s h' ! c s6 VP R 4 ' d VP R4 ' dk VP R8X g VP R8X dI \ P ! R4 ' g- \ P ! R4 ' g V P 4 # R# )zhttpd_t httpd_.*_script_tz httpd_.*tZfileZdirZ
httpd_unifiedZhttpd_enable_cgiN)Zmatches_source_typesZmatches_target_typesZtclassselinuxZsecurity_get_boolean_activeZreport)r Zavcs &&r analyzeZplugin.analyzeA sn $ $%@ A A # #K 0 0 JJ& CJJ%$744_EE445GHH;;= r N)r Z
__module__Z __qualname__Z__firstlineno___ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ then_textZdo_textr r Z__static_attributes__Z__classdictcell__)Z
__classdict__s @r r r sh G " O
(GuvGstIAG r r )ZgettextZ translationr
r Zsetroubleshoot.Pluginr r r r r r s: * 84 H
(-V -r