Rocky www - Versionsgeschichte

Thomas.will: /* Kontext setzen */

2026-07-08T16:17:30Z

Kontext setzen

2026-07-08T16:03:38Z

Wieder zu Ausearch

2026-07-08T16:02:22Z

Logs

2026-07-08T16:00:59Z

Wieder zu Ausearch

2026-07-08T15:59:32Z

Test

2026-07-08T15:58:44Z

2026-07-08T15:58:04Z

Test

2026-07-08T15:57:53Z

Test

2026-07-08T15:57:14Z

Test

2026-07-08T15:55:59Z

Test

@@ Zeile 129: / Zeile 129: @@
 == Kontext setzen ==
-* semanage fcontext -a -t httpd_sys_content_t "/etc/ssl/own.*"
+*semanage fcontext -a -t httpd_sys_content_t "/etc/ssl/own\.(crt|key)"
-* restorecon -Rv /etc/ssl/own.*
+*restorecon -Rv /etc/ssl/
 ;Kontext prüfen

@@ Zeile 157: / Zeile 157: @@
 *semanage fcontext -a -t httpd_sys_content_t "/var/repo(/.*)?"
 *restorecon -Rv /var/repo
 = Test =

@@ Zeile 157: / Zeile 157: @@
 *semanage fcontext -a -t httpd_sys_content_t "/var/repo(/.*)?"
 *restorecon -Rv /var/repo
 = Logs =
@@ Zeile 162: / Zeile 169: @@
 * tail -f /var/log/httpd/www.it2XX.int_error.log
 * tail -f /var/log/httpd/www.it2XX.int_access.log
 ;Zertifikat prüfen
 * openssl s_client -connect www.it2XX.int:443 -showcerts

@@ Zeile 154: / Zeile 154: @@
 type=SYSCALL msg=audit(1783461572.080:196): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fb4c400bd08 a2=7fb4d1de37c0 a3=100 items=0 ppid=3347 pid=3350 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
 type=AVC msg=audit(1783461572.080:196): avc:  denied  { getattr } for  pid=3350 comm="httpd" path="/var/repo/index.html" dev="dm-0" ino=67781042 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=0
 </pre>
 = Logs =

@@ Zeile 147: / Zeile 147: @@
 You don't have the permission to access this resource
 <pre>
 time->Tue Jul  7 23:59:32 2026
@@ Zeile 154: / Zeile 156: @@
 </pre>
 = Logs =
 * journalctl -fu httpd

← Nächstältere Version		Version vom 8. Juli 2026, 15:58 Uhr
Zeile 144:		Zeile 144:
	*https://www.it2XX.int		*https://www.it2XX.int
	Wir bekommen ein Forbidden		Wir bekommen ein Forbidden
−		+	a
	You don't have the permission to access this resource		You don't have the permission to access this resource

← Nächstältere Version		Version vom 8. Juli 2026, 15:57 Uhr
Zeile 146:		Zeile 146:

	You don't have the permission to access this resource		You don't have the permission to access this resource
		+	;Wieder zu Ausearch
		+	*ausearch -m avc -ts recent
		+	<pre>
		+	time->Tue Jul 7 23:59:32 2026
		+	type=PROCTITLE msg=audit(1783461572.080:196): proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44
		+	type=SYSCALL msg=audit(1783461572.080:196): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fb4c400bd08 a2=7fb4d1de37c0 a3=100 items=0 ppid=3347 pid=3350 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
		+	type=AVC msg=audit(1783461572.080:196): avc: denied { getattr } for pid=3350 comm="httpd" path="/var/repo/index.html" dev="dm-0" ino=67781042 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=0
		+	</pre>

	= Logs =		= Logs =

← Nächstältere Version		Version vom 8. Juli 2026, 15:55 Uhr
Zeile 146:		Zeile 146:

	You don't have the permission to access this resource		You don't have the permission to access this resource
−	~~;Wieder zu ausearch~~
−	*ausearch -m avc -ts recent
−	~~<pre>~~
−	~~time->Tue Jul 7 23:59:32 2026~~
−	~~type=PROCTITLE msg=audit(1783461572.080:196): proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44~~
−	type=SYSCALL msg=audit(1783461572.080:196): arch=c000003e syscall=262 success=no exit=-13 a0=ffffff9c a1=7fb4c400bd08 a2=7fb4d1de37c0 a3=100 items=0 ppid=3347 pid=3350 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
−	type=AVC msg=audit(1783461572.080:196): avc: denied { getattr } for pid=3350 comm="httpd" path="/var/repo/index.html" dev="dm-0" ino=67781042 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:var_t:s0 tclass=file permissive=0
−	~~</pre>~~

	= Logs =		= Logs =