SELinux Administration

From Nocrashwiki

First off, start the setroubleshoot daemon with this command

# /etc/rc.d/init.d/setroubleshoot start

If it is not there, then install it...

# yum -y install setroubleshoot

Now tail your messages log...

# tail -f /var/log/messages

Look for any entries like this: SELinux is preventing the http daemon from reading users home directories. For complete SELinux messages. run sealert -l ac083817-96fe-4220-bb01-a73e7bfca5f7

Do what it says... run

# sealert -l ac083817-96fe-4220-bb01-a73e7bfca5f7

That will give you a basic understanding of what is going on, and how to fix it...

# setsebool -P httpd_enable_homedirs=1

You may need to also reclassify those files as http files.. with this command.

# chcon -R -t httpd_sys_content_t ~user/public_html
# man httpd_selinux      ( will give you more info on this.) 

If you need to make a file readable and writeable by apache.

# chcon -t httpd_sys_script_rw_t /path/to/file

Enjoy!