> My guess is that you need to change the label of the validate program. You
> might try this:
>
> chcon -t chkpwd_exec_t /usr/sbin/validate
>
> Next question is whether or not apache can make that domain transition. Its an
> easy experiment to find out. Do the above chcon and try it. If that doesn't
> work, you can reset the label with "restorecon /usr/sbin/validate".
>
>  
FYI, this doesn't work. Apache cannot make this domain transition as
you suspected.

Scott

_______________________________________________
rhelv5-list mailing list
rhelv5-list@(protected)
https://www.redhat.com/mailman/listinfo/rhelv5-list