[CentOS] mystery process "unit"

Tue Aug 12 21:27:13 UTC 2008
Ned Slider <ned at unixmail.co.uk>

sbeam wrote:
> 
> Maybe enabling selinux but leaving httpd opened up would be appropriate for 
> the time being. Is that possible or advisable? audit2allow wants to allow a 
> lot of things.
> 

Try toggling the httpd_disable_trans boolean:

setsebool -P httpd_disable_trans on

That should disable SELinux protection of the httpd daemon.

Presumably that is preferable to running in permissive mode or disabling 
SELinux.