Hi,

I've nearly finished all the LAMP setup from the tarballs most recent versions, but I couldn't get apache server to run.

when i tried this:

/usr/local/apache2/bin/apachectl

it gives me this error msghttpd:

Syntax error on line 54 of /usr/local/apache2/conf/httpd.conf: Cannot load /usr/local/apache2/modules/libphp5.so into server: /usr/local/apache2/modules/libphp5.so: cannot restore segment prot after reloc: Permission denied



After doing some serious search, I realised that I need to modify selinux (either make it permissive or disabled).

Is there any way to modify the policy so I allow apache server to run without disabling selinux?

I've tried what you can get from the GUI options(under System-> Admin SElinux level and firewall-> SElinux -> disable SELinux on httpd daemon) but didn't work. And I tried to just diable SElinux fully, and it worked.

If anyone has any idea, about this matter please help.

Thanks in advance.

Cheers.

hi,
this might be helpful,
http://fedora.redhat.com/docs/selinux-faq-fc5/

specifically, try audittoallow command.if u found any particular file context changed try restorecon command

regards,
Nirmal Tom.

Thanks for the reply, I might dig into it tomorrow, looks like I have to go through the documentation of selinux part.

Cheers

hi,
ya ,its not too easy to get rid off these errors.Fedora 6 contains setroubleshoot , a graphical application to give permission to errors pointed by selinux.

But on my experience, its not so powerful.Usually u get selinux errors on apache for the contents under /var/www/html (i.e) web files we put new.in your case it seems an error on library file.If you reinstall apache(a simple hack try), i think u can avoid the error easily.

Also, try ls -Z for the file given error and u can find two terms in it.

scontext-context set for the file
tcontext-target context needed for file

Use chcon command to set context needed.


The document i point above contains a part for apache itself.



Note: if u change contexts too much, u can restore the contexts for all the files in the system with ease.


regards,
Nirmal Tom.