[ProLinux] Apache Virtual Hosting with Fedora Core 3 and SELinux

Author: Ted Roche

Posted: 2005-03-04 at 15:48:01

From my blog at

The Fedora Core 3 Linux distribution includes a very powerful new

security feature called SELinux. In my (very) limited understanding,

SELinux overlays another set of policies and permissions over the basic

UNIX-style security to produce a far more secure product. However, it

can also trip up the unsuspecting. At last night's LAMP class, we got

caught. Installing Virtual Hosts as we had with Fedora Core 2 threw

permission errors, despite everything we could think of. As it was a

beginner class, we just settled for placing the virtual hosts under the

standard DocumentRoot at /var/www/html and continuing on with our

exercise, with a promise that we'd investigate and explain to the

students what went wrong at the next class.

The Fedora web site provides guidance at "<a

href="Understanding" target="_blank">http://fedora.redhat.com/docs/selinux-apache-fc3/">Understanding

and Customizing the Apache HTTP SELinux Policy</a>." I was also pleased

to see that a WebMin module is under development to simplify SElinux

management at

http://www.selinux.hitachi-sk.co.jp/en/tool/selpe/selpe-top.html

©2005 Ted Roche