<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 07/27/2011 05:23 AM, Benedict S wrote:
<blockquote
cite="mid:CALNbb+Qa8Oe9x+dHr7fKKgKfJ1z0Wt44JdJZpRkFCvNhz+VmPQ@mail.gmail.com"
type="cite">Hello,everybody.<br>
<br>
There is no packages about mod_jk-ap20 in our fedora rpm
packages.How can I connect apache with tomcat,using <a
moz-do-not-send="true" name="N100C4"><span class="atitle">http_proxy
,</span></a><a moz-do-not-send="true" name="N100FA"><span
class="atitle">ajp_proxy or something else?Which method is the
best way to use it?<br>
<br>
When i start tomcat6 with command "service tomcat6 start " or
"run_init service tomcat6 start" ,the tomcat6 was running
under the context of "system_u:system_r:unconfined_java_t" and
the web's applications can't run successfully. I found there
is no module about tomcat and neither in
refpolicy-2.20101213.Should I write some policy for tomcat6 or
there is something wrong with my method.<br>
<br>
Thank you very much.<br>
<br>
</span></a>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
selinux mailing list
<a class="moz-txt-link-abbreviated" href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/selinux">https://admin.fedoraproject.org/mailman/listinfo/selinux</a></pre>
</blockquote>
Hi, the problem is tomcat6 calls the "/usr/sbin/tomcat6" script in
the tomcat6 init script. And java executable is called in this
script. So you end up in the uncofined_java_t domain which looks ok.<br>
<br>
What exactly doesn't work? Could you open a new bug on the
selinux-policy component and attach all AVC msgs which you are
getting?<br>
<br>
Regards,<br>
Miroslav<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
</body>
</html>