Shell Programming and Scripting

Corona688: I have no other option than compiling as i dont have root access and engaging administrator is another hassel .

SElinux is probably just doing its job, preventing users from running their own local daemons without the administrator's knowledge and approval.

Akshay Hegde : Compiling is not an issue . I see all the http processes ,starting the webserver is also not an issue . But the page is not getting displayed. any inputs ?

---------- Post updated at 10:58 AM ---------- Previous update was at 10:57 AM ----------

Corona688 . But process are running .

Code:

/local/tools/apache/logs > ps -ef |grep http
weather  22178     1  0 Jul21 ?        00:00:03 /local/tools/apache/bin/httpd -k start
weather  22179 22178  0 Jul21 ?        00:00:23 /local/tools/apache/bin/httpd -k start
weather  22180 22178  0 Jul21 ?        00:00:23 /local/tools/apache/bin/httpd -k start
weather  22182 22178  0 Jul21 ?        00:00:23 /local/tools/apache/bin/httpd -k start

So what? That doesn't mean it's going to work.

I suspect this is SElinux doing its job, preventing users from running network daemons without the administrator's knowledge and approval. This is usually a useful function... An attacker can't just just dump in an IRC server or whatever to coordinate a botnet, even if they did manage to get in.

So you will likely need to ask your administrator to enable networking on that port for the daemon you installed without his knowledge.

Or, more likely, just get him to install an apache server properly.

I asked the administrator to open ports for 8080 which I am using a non root user port . So is that still a problem on SELinux

Code:

/local/tools/apache/logs > netstat -na|grep 8080
tcp        0      0 149.186.251.174:8080        0.0.0.0:*                   LISTEN

---------- Post updated at 11:10 AM ---------- Previous update was at 11:08 AM ----------

Only problem when having root user to install webserver is everytime you want to update httpd.conf you need root user to update . Which is not feasible . So its always good to compile your own source code and edit the configuration as possible .

Things which don't require explicit permission in ordinary Linux, do in SElinux -- that is the entire point of having it. SElinux is "security-enhanced Linux". It adds many extra layers of checks and controls. Often we get people coming here having problems with ordinary programs in SElinux, the solution of which is to enable certain special SElinux options, permissions, or bug their administrator to do so. It's a completely different kettle of fish.

So it's entirely possible that you're not getting the access you need just because SElinux isn't configured to allow full access to rogue daemons which someone just happened to upload without Administrator oversight or approval.

Most distributions of apache organize it into sub-files, so you don't need to edit httpd.conf at all. File access permissions or a line in sudoers or whatever could easily be set up so you could edit any of those files yourself anyway.