[CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...
Jonathan Billings
billings at negate.orgSat Aug 20 21:59:49 UTC 2016
- Previous message: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...
- Next message: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
> On Aug 20, 2016, at 15:00, Walter H. <Walter.H at mathemainzel.info> wrote: > > Hello, > > how could it be achieved to run > e.g. > shutdown -h now > from a CGI script on a system where SELinux is set to ENFORCING? Short answer: don't. You could probably create a custom selinux policy that allowed it but you'd be opening your system up to more security issues. If it were me, I'd have the cgi drop a file in a known location, and have an external process (possibly started through cron) monitor the file, then run shutdown conditionally. -- Jonathan Billings
- Previous message: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...
- Next message: [CentOS] running CGI scripts with SELinux=ENFORCING with priviledged commands ...
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the CentOS mailing list