Selinux Tips

About

This page just has a few Selinux tips/reminders

File Access

If selinux is blocking access to files that httpd should be able to read it may be they are missing selinux flags:

semanage fcontext -a -t httpd_sys_content_t "[FILE OR PATH]"

Proxying

When proxying backend services with httpd, you typically need to do two things:

• Allow http to make connections: setsebool -P httpd_can_network_connect on
• Allow the ports for your backend connections: semanage port -a -t http_port_t -p tcp ####