SELinux Misc: Unterschied zwischen den Versionen

Version vom 22. November 2022, 07:27 Uhr

@@ Zeile 1: / Zeile 1: @@
-=Create file my-httpd-php-ping.te and put this in it=
+*[[Create SELinux Modul]]
-*cat my-httpd-php-ping.te
-<pre>
-module my-httpd-php-ping 1.0;
-require {
-        type httpd_t;
-        class capability { net_admin net_raw };
-        class icmp_socket create;
-        class rawip_socket { create getopt read setopt write };
-}
-#============= httpd_t ==============
-allow httpd_t self:capability { net_admin net_raw };
-allow httpd_t self:icmp_socket create;
-allow httpd_t self:rawip_socket { create getopt read setopt write };
-</pre>
-=Compile it to a SELinux module like so=
-*checkmodule -M -m -o my-httpd-php-ping.mod my-httpd-php-ping.te
-*semodule_package -o my-httpd-php-ping.pp -m my-httpd-php-ping.mod
-=And install it:=
-*semodule -i my-httpd-php-ping.pp
-=Afterwards, enable SELinux again=
-*setenforce 1
-=Links=
-*https://unix.stackexchange.com/questions/675203/selinux-blocks-ping-from-php-exec
-*https://forums.centos.org/viewtopic.php?t=49172
-*https://phpipam.net/news/selinux-policy-for-icmp-checks/