PHP的Selinux exec /权限被拒绝

在Fedora中,你如何configurationSelinux为PHP系统或exec函数运行的任意可执行文件提供权限? closuresSELinux不是我的select。

$ getsebool -a | grep httpd allow_httpd_anon_write --> off allow_httpd_mod_auth_ntlm_winbind --> off allow_httpd_mod_auth_pam --> off allow_httpd_sys_script_anon_write --> off httpd_builtin_scripting --> on httpd_can_check_spam --> off httpd_can_network_connect --> off httpd_can_network_connect_cobbler --> off httpd_can_network_connect_db --> off httpd_can_network_memcache --> off httpd_can_network_relay --> off httpd_can_sendmail --> off httpd_dbus_avahi --> off httpd_enable_cgi --> on httpd_enable_ftp_server --> off httpd_enable_homedirs --> off httpd_execmem --> off httpd_read_user_content --> off httpd_setrlimit --> off httpd_ssi_exec --> on httpd_tmp_exec --> off httpd_tty_comm --> on httpd_unified --> off httpd_use_cifs --> off httpd_use_gpg --> off httpd_use_nfs --> off 

检查与Apache相关的当前SELinux设置:

 # /usr/sbin/getsebool -a | grep httpd 

您需要打开httpd_ssi_exec以允许Apache执行SSI脚本:

 # setsebool -P httpd_ssi_exec=1 

刚碰上同样的问题。 设置httpd_execmem来解决这个问题。