summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKarl MacMillan <kmacmill@redhat.com>2007-09-28 16:45:57 -0400
committerKarl MacMillan <kmacmill@redhat.com>2007-09-28 16:45:57 -0400
commit22710a8dce6700cfd3c991d9c0e5425fc7bdea5e (patch)
tree97fa6f6c25899342ad413967ee564985da5b1b90
parent24c22a2ebc3852e880c18b7c572954f0f99ada1d (diff)
downloadfreeipa-22710a8dce6700cfd3c991d9c0e5425fc7bdea5e.tar.gz
freeipa-22710a8dce6700cfd3c991d9c0e5425fc7bdea5e.tar.xz
freeipa-22710a8dce6700cfd3c991d9c0e5425fc7bdea5e.zip
Make apache work with selinux
The default configuration of the apache selinux policy doesn't allow apache to connect to the turbogears gui. This sets the correct boolean to allow that connection.
-rw-r--r--ipa-server/ipa-install/ipa-server-install3
1 files changed, 3 insertions, 0 deletions
diff --git a/ipa-server/ipa-install/ipa-server-install b/ipa-server/ipa-install/ipa-server-install
index 439a8b3fe..d4e55302b 100644
--- a/ipa-server/ipa-install/ipa-server-install
+++ b/ipa-server/ipa-install/ipa-server-install
@@ -369,6 +369,9 @@ def main():
ds.restart()
krb.restart()
+ # Allow apache to connect to the turbogears web gui
+ run(["/usr/sbin/setsebool", "httpd_can_network", "true"])
+
# Restart apache
run(["/sbin/service", "httpd", "restart"])