Re: apache + mod_perl + sendmail - FC3 SELinux

[Karsten Wade]

On Fri, 2005-04-29 at 00:33 -0700, Joe Roback wrote:

>  I am using software from http://software.eprints.org. Web application
>
>  that uses mod_perl. It sends emails for registering users and forgotten 
>  passwords. Anything an email is fired off syslog shows this: 
Did you catch this message yesterday:

http://www.redhat.com/archives/fedora-selinux-list/2005-April/msg00247.html

In it, Dan says:

"3 Local User customization and minor policies.  Currently we have
people 
using audit2allow creating files in domains/misc and then
reloading policy.   We need a mechanism for users to be able to do this 
without recompiling policy.    Also more significantly how
do we handle the small diffed apache_domain stuff.  A couple of months 
ago I redesigned apache policy to have a macro called
apache_domain.  A user could create a new apache_XYZ.te file with

apache_domain(XYZ)
Followed by a few allow rules and be able to get their cgi scripts 
working without turning off apache protection or running their script in
httpd_unconfined_script_t."


-- 
Karsten Wade, RHCE * Sr. Tech Writer * http://people.redhat.com/kwade/
gpg fingerprint:  2680 DBFD D968 3141 0115    5F1B D992 0E06 AD0E 0C41   
                       Red Hat SELinux Guide
http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/