Allowing httpd restart a service

Watts M.R. M.R.Watts at soton.ac.uk
Fri Jun 6 10:48:28 UTC 2014




>Ok, the problem is we have "sudo" running in httpd_t. So if I understand
>correctly you have CGI script which runs
>
>"/usr/bin/sudo /etc/init.d/icinga reload"
>
>right?
>
>What does
>
># ls -Z PATHTO_YOUR_SCRIPT

For other reasons I¹ve changed to using Nagios on the server now instead
of Icinga but the basic problem remains;
Running ³/usr/bin/sudo /etc/init.d/nagios reload² fails


# ls -laZ /var/www/nconf/bin/generate_config.pl
-rwxr-xr-x. root root unconfined_u:object_r:httpd_sys_script_exec_t:s0
/var/www/nconf/bin/generate_config.pl


--
Mark Watts
Infrastructure Engineer, iSolutions
University of Southampton
Tel: (02380) 595788 Int: 25788



More information about the selinux mailing list