Red Hat Summit Red Hat SummitSupportKonsoleEntwicklerDemo startenKontakt

Dieser Inhalt ist in der von Ihnen ausgewählten Sprache nicht verfügbar.

2.7. SELinux Policies

For each of the RPMs listed in the table, specific SELinux policies are installed and applied as a default.
Expand
Table 2.1. RPMs and Default SELinux Policies
NamePort InformationPolicy Information
mod_clusterTwo ports (6666 for TCP and 23364 for UDP) are added for httpd_port_t to allow the httpd process to use them. A post installation script configures the context mapping for /var/cache/mod_cluster to enable the httpd process to write at this location.
mod_snmpThe installed mod_snmp policy allows httpd processes to bind to snmp_port_t ports. This allows httpd to use port 161 and 162 (used with both UDP and TCP).A post installation script configures the context mapping for /var/cache/mod_snmp to enable the httpd process to write at this location.
tomcatFour ports are added to http_port_t (TCP ports 8080, 8005, 8009 and 8443) to allow the httpd process to use them.The Tomcat{version} policy is installed, which sets ths appropriate SELinux domain for the process when Tomcat executes. It also sets the appropriate contexts to allow tomcat to write to /var/lib/tomcat{version}, /var/log/tomcat{version}, /var/cache/tomcat{version} and /var/run/tomcat{version}.pid.
For further information about using SELinux and other Red Hat Enterprise Linux security information, refer to the Red Hat Enterprise Linux 6 Security Guide.

2.7.1. Default SELinux Policies for a ZIP Installation
Link kopieren

No SELinux configuration is provided (or supported) as a default for the JBoss Enterprise Web Server ZIP files. For the ZIP files, httpd and Tomcat processes run in httpd_t or unconfined_java_t domains. These domains do not confine the processes, therefore the administrator must take the following security precautions:
  • Run httpd using the apachectl script. This ensures that the user apache owns the processed instead of the user root.
  • Confine file access for users tomcat and apache to files and directories that are not necessary to the JBoss Enterprise Web Server runtime.
  • Do not run Tomcat as the user root.
To avoid the listed security suggestions, it is recommended to use the RPM version of the JBoss Enterprise Web Server installation.
Red Hat logoGithubredditYoutubeTwitter

Lernen

Testen, kaufen und verkaufen

Communitys

Über Red Hat Dokumentation

Wir helfen Red Hat Benutzern, mit unseren Produkten und Diensten innovativ zu sein und ihre Ziele zu erreichen – mit Inhalten, denen sie vertrauen können. Entdecken Sie unsere neuesten Updates.

Mehr Inklusion in Open Source

Red Hat hat sich verpflichtet, problematische Sprache in unserem Code, unserer Dokumentation und unseren Web-Eigenschaften zu ersetzen. Weitere Einzelheiten finden Sie in Red Hat Blog.

Über Red Hat

Wir liefern gehärtete Lösungen, die es Unternehmen leichter machen, plattform- und umgebungsübergreifend zu arbeiten, vom zentralen Rechenzentrum bis zum Netzwerkrand.

Theme

© 2026 Red HatNach oben