20 Aug
2016
20 Aug
'16
11:59 p.m.
On Aug 20, 2016, at 15:00, Walter H. Walter.H@mathemainzel.info wrote:
Hello,
how could it be achieved to run e.g. shutdown -h now from a CGI script on a system where SELinux is set to ENFORCING?
Short answer: don't. You could probably create a custom selinux policy that allowed it but you'd be opening your system up to more security issues.
If it were me, I'd have the cgi drop a file in a known location, and have an external process (possibly started through cron) monitor the file, then run shutdown conditionally.
-- Jonathan Billings