We're using it here also. If I remember what we did, give the web process permission to go read your notebook files. I did not set this up myself but in conjunction with the box's admin so I don't know the full details, but that was the last major stumbling block once SELinux was enforced.
From: LISTSERV Site Administrators' Forum <[log in to unmask]> On Behalf Of Helmke,Richard A
Sent: Friday, June 29, 2018 9:16 AM
To: [log in to unmask]
Subject: Using SELINUX with LISTSERV on RHEL 7
I recently migrated a LISTSERV 16.0 system to a new host running RHEL 7.5 (Oracle Linux 7.5) and LISTSERV 16.5. Everything seems to be functioning normally, but SELINUX was turned off.
Now that the migration is complete, we would like to turn SELINUX. We started by running with SELINUX in 'permissive' mode for several weeks and then followed the steps outlined in the whitepaper "Using LISTSERV with Security-Enhanced Linux (SELinux)". Many things work like receiving messages, posting and archiving, and distribution. Some do not -- like being able to use the webinterface to read some archived messages. We have run the the steps in the whitepaper several times over several days to 'update' the SELINUX rules without any noticeable change in behavioir.
I know the simple answer is "just don't run SELINUX". However, I would like to take advantage of the extra layer of security. If you are running SELINUX in 'enforcing' mode on RHEL 7.x, did you have to make any changes to the steps outlined in the whitepaper?
Rich Helmke
________________________________
To unsubscribe from the LSTSRV-L list, click the following link:
http://peach.ease.lsoft.com/scripts/wa-PEACH.exe?SUBED1=LSTSRV-L&A=1<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpeach.ease.lsoft.com%2Fscripts%2Fwa-PEACH.exe%3FSUBED1%3DLSTSRV-L%26A%3D1&data=02%7C01%7Ckaminsmj%40DREXEL.EDU%7C94dd48fe321348d35bf908d5ddc26ba1%7C3664e6fa47bd45a696708c4f080f8ca6%7C0%7C1%7C636658749457635828&sdata=NAgKZ%2BQOva4xoUTIKeT9M7lLEVonnM96k%2BlPBCktV0M%3D&reserved=0>
############################
To unsubscribe from the LSTSRV-L list:
write to: mailto:[log in to unmask]
or click the following link:
http://peach.ease.lsoft.com/scripts/wa-PEACH.exe?SUBED1=LSTSRV-L&A=1
