How to disable SELinux for Apache httpd only on my Fedora 14?

Solution 1:

Converting my earlier comment into an answer, to popular demand ;)

From the you-learn-something-everyday department: I saw Dan Walsh give a presentation yesterday, in which he explained the new way of disabling confinement for applications in newer releases of Fedora and EL6. You no longer set a boolean to disable transition (which sometimes causes a cascade in booleans that need to be set for everything to work), but you put a certain type in permissive mode. You do this by running the 'semanage permissive -a TYPE' command (in your case 'semanage permissive -a httpd_t'). This leaves SELinux on for httpd_t, but in permissive mode. – wzzrd May 20 '11 at 8:45

Solution 2:

For Fedora 14, like in el6, I think you can just unload the http SELinux module, by running

semodule -r httpd

That'll probably make httpd run as initrc_t or unconfined_t.

If that doesn't work for F14, you can turn off the SELinux boolean (the 'old' way, from el5), like this:

setsebool httpd_disable_trans 1

and use

setsebool -P httpd_disable_trans 1

to make it permanent