Find the answer to your Linux question:
Results 1 to 5 of 5
looking for help getting selinux to allow mysql calls from apache so that my webserver will work. i havent found this yet. anyone found a wya to do it? if ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Feb 2005
    Location
    with a keyboard and linux
    Posts
    16

    mysql not talking to php running apache on se enabled fedora


    looking for help getting selinux to allow mysql calls from apache so that my webserver will work.

    i havent found this yet. anyone found a wya to do it? if so, please point me in the right direction. i've beed trying for about 2 weeks and the last 3 days have been googling for it to no avail

    thanx in advance

  2. #2
    Linux Guru kkubasik's Avatar
    Join Date
    Mar 2004
    Location
    Lat: 39:03:51N Lon: 77:14:37W
    Posts
    2,396
    in exactly what capacity has this not been working? Have you been trying to use php to access a database? If so, did you install the database connectors, and mod_php.... also can you access the database from outside apache?
    Avoid the Gates of Hell. Use Linux
    A Penny for your Thoughts

    Formerly Known as qub333

  3. #3
    Just Joined!
    Join Date
    Feb 2005
    Location
    with a keyboard and linux
    Posts
    16
    mysql is working fine. the database is ther and accessable. everything for that is right. i've found things that say that linux stops iapache from talking to mysql. apache is working aside from talking to mysql. so is php. so i know the issue is SE, however, i'm in a situation where turning off SE is NOT an option. i am allowed to modify SE so that apache may talk to mysql, but that's the only change i'm allowed.

  4. #4
    Linux Guru kkubasik's Avatar
    Join Date
    Mar 2004
    Location
    Lat: 39:03:51N Lon: 77:14:37W
    Posts
    2,396
    I think your going to need to look at your firewall rules, it might be dropping all packets from local IP's attempting to contact services, I'm not really familiar with SElinux so this is more a blind shot, do you know what changes it imposes upon database and webservers? The more likely option is that it has disabled certain mod_php abilities (ie, compiled with --/no-database or something similar) as the major security concern with php is the large host of system functions that it supports and that can be accessed via web forms.
    Avoid the Gates of Hell. Use Linux
    A Penny for your Thoughts

    Formerly Known as qub333

  5. #5
    Just Joined!
    Join Date
    Feb 2005
    Location
    with a keyboard and linux
    Posts
    16
    from what i've read there's no difference in compilation, the difference is how SE allows things to be done. and for apache it kills the ability to talk to databases such as mysql .

    there's check boxes to tell it to allow ssi, cgi, but not mysql or any other type of sql. personally i think this is a ailure int he SE controls gui. if i understood the policies thing i might be able to do itt by hand, but as of yet i cant find anythig that has any real explanation of policies and how to write them

    the best i found is this, and it's very...lacking

    http://fedora.redhat.com/docs/selinu...fc3/index.html

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •