SELinux Archives - Experiencing Technology https://blog.tinned-software.net/tag/selinux/ Tinned-Software Blog Sat, 14 Jul 2018 20:27:41 +0000 en-US hourly 1 https://wordpress.org/?v=6.4.3 Docker container on RHEL fails to start without error https://blog.tinned-software.net/docker-container-on-rhel-fails-to-start-without-error/ Mon, 23 Jul 2018 10:27:03 +0000 https://blog.tinned-software.net/?p=2638 Recently a Docker container refused to start for me without any hint about why in the OS or Docker container’s logs. It turns out that SELinux jumped in and blocked access without logging its interference. Containers which were running in … Continue reading →

The post Docker container on RHEL fails to start without error appeared first on Experiencing Technology.

Related posts:

  1. yum – install package that contains a specific file
  2. Change SSH port in CentOS with SELinux
  3. Set up apache and the log path with SELinux
]]> Manage SELinux boolean policies https://blog.tinned-software.net/manage-selinux-boolean-policies/ Mon, 05 Mar 2018 08:58:37 +0000 https://blog.tinned-software.net/?p=2515 Configuring a new service often means dealing with SELinux. The easiest way is most of the time to set an SELinux boolean. But what are SELiunx booleans and what exactly do they do? I will try to shed a little … Continue reading →

The post Manage SELinux boolean policies appeared first on Experiencing Technology.

Related posts:

  1. Change SSH port in CentOS with SELinux
  2. yum – install package that contains a specific file
  3. Set up apache and the log path with SELinux
]]> Apache document root in users home directory with SELinux https://blog.tinned-software.net/apache-document-root-in-users-home-directory-with-selinux/ Mon, 11 Dec 2017 14:37:40 +0000 https://blog.tinned-software.net/?p=2525 Serving web-content from a user’s home directory allows the user to conveniently upload files. By default, the apache configuration in many Linux distributions assumes content is uploaded to a single directory owned by the webserver’s user, but it might be … Continue reading →

The post Apache document root in users home directory with SELinux appeared first on Experiencing Technology.

Related posts:

  1. Set up apache and the log path with SELinux
  2. SELinux allow webserver to send email
  3. Change SSH port in CentOS with SELinux
]]> SSH-Key authentication is not working – SELinux https://blog.tinned-software.net/ssh-key-authentication-is-not-working-selinux/ https://blog.tinned-software.net/ssh-key-authentication-is-not-working-selinux/#comments Mon, 05 Jan 2015 13:44:32 +0000 http://blog.tinned-software.net/?p=1414 When configuring SSH passwordless login with ssh-key the ssh-key generated and transfered to the server seems to not work when I try to login. Whay is the ssh-key authentication failing? Continue reading →

The post SSH-Key authentication is not working – SELinux appeared first on Experiencing Technology.

Related posts:

  1. SSH passwordless login with SSH-key
  2. Change SSH port in CentOS with SELinux
  3. Restrict SSH login using SSH keys to a particular IP address
]]> https://blog.tinned-software.net/ssh-key-authentication-is-not-working-selinux/feed/ 1 SELinux allow webserver to send email https://blog.tinned-software.net/selinux-allow-webserver-to-send-email/ Fri, 14 Nov 2014 08:35:09 +0000 http://blog.tinned-software.net/?p=1090 When Wordpress tries to send email and you see "your host may have disabled the mail() function" it might be that SELinux is blocking it. Here is how to enable it. Continue reading →

The post SELinux allow webserver to send email appeared first on Experiencing Technology.

Related posts:

  1. Set up apache and the log path with SELinux
  2. Change SSH port in CentOS with SELinux
  3. yum – install package that contains a specific file
]]> Migrate WordPress site with minimal downtime https://blog.tinned-software.net/migrate-wordpress-site-with-minimal-downtime/ Sat, 20 Sep 2014 10:46:05 +0000 http://blog.tinned-software.net/?p=1087 Migrating a Wordpress installation from one server to the other sounds like a simple task. Just move the files, copy the database for Wordpress and lets go. But when you start dealing with the DNS entries the whole story gets tricky. Continue reading →

The post Migrate WordPress site with minimal downtime appeared first on Experiencing Technology.

Related posts:

  1. SELinux allow webserver to send email
  2. Migrate Baikal with minimal downtime
  3. SPF and multiple domain mailserver
]]> Set up apache and the log path with SELinux https://blog.tinned-software.net/set-up-apache-and-the-log-path-with-selinux/ Thu, 17 Apr 2014 20:44:22 +0000 http://blog.tinned-software.net/?p=1052 Depending on your backup strategy you might run into troubles of backup the entire /etc directory. Running a default installed Apache on CentOS will have the log directory of Apache linked from within the /etc/httpd/ directory. If you backup solution would backup those as well, the backups would contain the logs and get huge. Continue reading →

The post Set up apache and the log path with SELinux appeared first on Experiencing Technology.

Related posts:

  1. Change SSH port in CentOS with SELinux
  2. yum – install package that contains a specific file
  3. SELinux allow webserver to send email
]]> Change SSH port in CentOS with SELinux https://blog.tinned-software.net/change-ssh-port-in-centos-with-selinux/ Wed, 12 Feb 2014 08:25:21 +0000 http://blog.tinned-software.net/?p=1017 Since version 4 of CentOS, SELinux is providing an additional layer of security to the Linux distribution. As of SELinux in combination with sshd, changing the port or even listening on 2 ports is not as easy as just changing the sshd configuration file. Continue reading →

The post Change SSH port in CentOS with SELinux appeared first on Experiencing Technology.

Related posts:

  1. Restrict Linux User to SCP to his home directory
  2. Secure SSH server access
  3. yum – install package that contains a specific file
]]> yum – install package that contains a specific file https://blog.tinned-software.net/yum-install-package-that-contains-a-specific-file/ Sat, 11 Jan 2014 20:47:24 +0000 http://blog.tinned-software.net/?p=1040 When i realised that the program to manage the SELinux rules is called "semanage" i tried to find a package of the same name in the yum repositories. But i could not find it. So i had to find it inside the yum repository. I am happy that yum provides an easy way to find a file that is provided within a package. Continue reading →

The post yum – install package that contains a specific file appeared first on Experiencing Technology.

Related posts:

  1. Change SSH port in CentOS with SELinux
  2. Set up apache and the log path with SELinux
  3. Docker container on RHEL fails to start without error
]]>