lemonldap-ng/doc/sources/admin/selinux.rst
2020-06-01 16:22:25 +02:00

47 lines
569 B
ReStructuredText

SELinux
=======
To make LemonLDAP::NG work with SELinux, you may need to set up some
options.
Disk cache (sessions an configuration)
--------------------------------------
::
chcon -R -t httpd_sys_rw_content_t /tmp
To persist the rule:
::
semanage fcontext -a -t http_sys_content_t /tmp
LDAP
----
::
setsebool -P httpd_can_connect_ldap 1
Databases
---------
::
setsebool -P httpd_can_network_connect_db 1
Memcache
--------
::
setsebool -P httpd_can_network_memcache 1
Proxy HTTP
----------
::
setsebool -P httpd_can_network_relay 1