2015/10/21

cacti with SELinux


From:
http://docs.cacti.net/manual:087:1_installation.1_install_unix.8_selinux

SELinux Settings

SELinux setting greatly depend on which exact setup you are running. E.g. when installing Cacti into /var/www/html/cacti (which is the default installation location), the web server httpd usually has the required permissions to execute as required. But when e.g. installing into a private directory, e.g. ~/mycacti, you will have to provide specific SELinux settings.

Global SELinux Settings

This is an excerpt from my personal settings when installing into private directory. Any or all of them may be obsolete, when using the default location. Use -P option to make the change permanent

/usr/sbin/setsebool -P httpd_read_user_content=1
/usr/sbin/setsebool -P httpd_tty_comm=1
/usr/sbin/setsebool -P httpd_can_network_connect=1
/usr/sbin/setsebool -P httpd_builtin_scripting=1
/usr/sbin/setsebool -P httpd_enable_homedirs=1
/usr/sbin/setsebool -P httpd_enable_cgi=1

SELinux Settings for Plugins

BOOST

In case you are using BOOST server network setup, it was reported that
/usr/sbin/setsebool -P httpd_can_network_connect=1
 
 
 chcon -R -t httpd_sys_content_t /usr/share/cacti/
<==這句最重要 
 

沒有留言:

手機QQ禁用NFC

一圖解千言萬語 應用程式權限:透過NFC起動