SELinux Misc: Unterschied zwischen den Versionen

@@ Zeile 1: / Zeile 1: @@
-=Create file my-httpd-php-ping.te and put this in it=
+*[[Create SELinux Modul]]
-*cat my-httpd-php-ping.te
+*[[Create SELinux Modul with audit2allow]]
-<pre>
+*[[Check SELinux Modul]]
-module my-httpd-php-ping 1.0;
+<!--*[[Eigenes Profil erstellen SELinux]]-->
+*[[Eigenes Profil erstellen Beispiel ncat]]
-require {
-        type httpd_t;
-        class capability { net_admin net_raw };
-        class icmp_socket create;
-        class rawip_socket { create getopt read setopt write };
-}
-#============= httpd_t ==============
-allow httpd_t self:capability { net_admin net_raw };
-allow httpd_t self:icmp_socket create;
-allow httpd_t self:rawip_socket { create getopt read setopt write };
-</pre>
-=Compile it to a SELinux module like so=
-*checkmodule -M -m -o my-httpd-php-ping.mod my-httpd-php-ping.te
-*semodule_package -o my-httpd-php-ping.pp -m my-httpd-php-ping.mod
-=And install it:=
-*semodule -i my-httpd-php-ping.pp
-=Afterwards, enable SELinux again=
-*setenforce 1
-=Links=
-*https://unix.stackexchange.com/questions/675203/selinux-blocks-ping-from-php-exec
-*https://forums.centos.org/viewtopic.php?t=49172

Aktuelle Version vom 11. Januar 2023, 10:23 Uhr