sbeam wrote:
Maybe enabling selinux but leaving httpd opened up would be appropriate for the time being. Is that possible or advisable? audit2allow wants to allow a lot of things.
Try toggling the httpd_disable_trans boolean:
setsebool -P httpd_disable_trans on
That should disable SELinux protection of the httpd daemon.
Presumably that is preferable to running in permissive mode or disabling SELinux.