« June 2005 | Main | September 2005 »

August 16, 2005

SELinux, Apache, and User Directories

For those of you using SELinux and Apache, this might be useful. Our web-server recently suffered and untimely and tragic death forcing us to set up a new machine. Being the ambitious people that we are, we quickly loaded Fedora Core 4 on the new machine and attempted to configure the Apache server for user directories. What a fiasco this turned out to be!

Fedora Core 4 has new security features named SELinux. SELinux restricts the locations from which Apache can server pages. For example, we were unable to serve user directories from our NFS mounted partition. All of the "HOWTO" docks we found at RedHat claimed that we could enable user directories for httpd in the systems-config-securitylevel tool. We quickly tried this with now luck at all. Our solution? Disable SELinux and protect ourselves the good old fashioned way that we used before. Sad but true. Other folks we have talked too have gone this route as well. Is there someone out there who can help me understand how to actually use SELinux and server user directories on an NSF mounted partition?

Posted by egm at 04:02 PM | Comments (0)