On Monday 28 January 2008 15:26:51 Scott Bambrough wrote:
> With mod_auth_shadow, SELinux denies httpd access to
> /usr/sbin/validate.  This is an suid helper program run by
> mod_auth_shadow which actually opens and performs a validation request
> for mod_auth_shadow.

My guess is that you need to change the label of the validate program. You
might try this:

chcon -t chkpwd_exec_t /usr/sbin/validate

Next question is whether or not apache can make that domain transition. Its an
easy experiment to find out. Do the above chcon and try it. If that doesn't
work, you can reset the label with "restorecon /usr/sbin/validate".

-Steve

_______________________________________________
rhelv5-list mailing list
rhelv5-list@(protected)
https://www.redhat.com/mailman/listinfo/rhelv5-list