[Bug 164992] New: Mod_proxy does not work with SElinux default policy

Joe Orton jorton at redhat.com
Wed Aug 3 13:45:07 UTC 2005


On Wed, Aug 03, 2005 at 09:41:43AM -0400, Daniel J Walsh wrote:
> Joe Orton wrote:
> >Expected Results:  I would expect the default policy to allow proxying and 
> >Message is not explicit and I had to search a long time to understand....
> >
> >Additional info:
> >
> > 
> >
> We could allow apache to connect to apache ports by default, if that 
> would satisfy this.

No, when mod_proxy is used as a generic HTTP proxy (a not entirely 
uncommon configuration) it needs to be able to connect to any remote 
port on any remote address.

joe




More information about the selinux mailing list