Received-SPF: pass (google.com: domain of selinux-bounces@lists.fedoraproject.org designates 38.145.60.11 as permitted sender) client-ip=38.145.60.11;
Date: Sat, 19 Sep 2020 21:56:04 +0000 (UTC)
From: Jason Long <hack3rcon@yahoo.com>
To: SELinux On Fedora Discussion <selinux@lists.fedoraproject.org>
Message-ID: <1264724349.3954886.1600552564979@mail.yahoo.com>
Subject: Is my SELinux configuration wrong and dangerous?
MIME-Version: 1.0
References: <1264724349.3954886.1600552564979.ref@mail.yahoo.com>
Message-ID-Hash: 5C5RVSVMG2H4LOPELMPQKSFIJDOHF5CQ
Precedence: list
Reply-To: Jason Long <hack3rcon@yahoo.com>
Archived-At: <https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.org/message/5C5RVSVMG2H4LOPELMPQKSFIJDOHF5CQ/>
Content-Type: multipart/mixed; boundary="===============7580811246750935028=="

--===============7580811246750935028==
Content-Type: multipart/alternative;
	boundary="----=_Part_3954885_1350769752.1600552564978"

------=_Part_3954885_1350769752.1600552564978
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello,I'm using CentOS 8 as a web server that hosting a WordPress website. =
I have two questions.=C2=A01- I defined SELinux for WordPress directory as =
below:
# ls -lZ /var/www/drwxrwxr-x. 7 apache apache unconfined_u:object_r:httpd_s=
ys_rw_content_t:s0 4096 Sep 19 23:37 wp
I created an account for a remote developer that working on WordPress. On s=
ome websites, I saw that the OK permission forwp directory is "httpd_sys_r_=
content_t" and not "httpd_sys_rw_content_t" and someone recommended to back=
 permission via below command:
# restorecon -rv /var/www/wp
Is it true? Is "httpd_sys_rw_content_t" a dangerous permission and can lead=
 to hacking?
2- WordPress can't update and showed me "cURL Error (7): couldn't connect t=
o host" error. I did below command to solve it:
# setsebool -P httpd_can_network_connect on
Can this command make Apache insecure and must I turn it to "off" ?

Thank you.
------=_Part_3954885_1350769752.1600552564978
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello,<div id=3D"yMail_cursorElementTracker_1600552342311">I'm using CentOS=
 8 as a web server that hosting a WordPress website. I have two questions.&=
nbsp;</div><div id=3D"yMail_cursorElementTracker_1600552359713">1- I define=
d SELinux for WordPress directory as below:</div><div id=3D"yMail_cursorEle=
mentTracker_1600552273779"><br></div><div># ls -lZ /var/www/</div><div>drwx=
rwxr-x. 7 apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0   4=
096 Sep 19 23:37 wp</div><div id=3D"yMail_cursorElementTracker_160055226942=
8"><br></div><div>I created an account for a remote developer that working =
on WordPress. On some websites, I saw that the OK permission for</div><div>=
wp directory is "httpd_sys_r_content_t" and not "httpd_sys_rw_content_t" an=
d someone recommended to back permission via below command:</div><div id=3D=
"yMail_cursorElementTracker_1600552264667"><br></div><div># restorecon -rv =
/var/www/wp</div><div id=3D"yMail_cursorElementTracker_1600552260691"><br><=
/div><div id=3D"yMail_cursorElementTracker_1600552311202">Is it true? Is "h=
ttpd_sys_rw_content_t" a dangerous permission and can lead to hacking?</div=
><div id=3D"yMail_cursorElementTracker_1600552314873"><br></div><div id=3D"=
yMail_cursorElementTracker_1600552372914">2- WordPress can't update and sho=
wed me "cURL Error (7): couldn't connect to host" error. I did below comman=
d to solve it:</div><div id=3D"yMail_cursorElementTracker_1600552452165"><b=
r></div><div id=3D"yMail_cursorElementTracker_1600552452688"># setsebool -P=
 httpd_can_network_connect on</div><div id=3D"yMail_cursorElementTracker_16=
00552501554"><br></div><div id=3D"yMail_cursorElementTracker_1600552502473"=
>Can this command make Apache insecure and must I turn it to "off" ?</div><=
div id=3D"yMail_cursorElementTracker_1600552548950"><br></div><div><br></di=
v><div>Thank you.</div>
------=_Part_3954885_1350769752.1600552564978--

--===============7580811246750935028==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc2VsaW51eCBt
YWlsaW5nIGxpc3QgLS0gc2VsaW51eEBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpUbyB1bnN1YnNj
cmliZSBzZW5kIGFuIGVtYWlsIHRvIHNlbGludXgtbGVhdmVAbGlzdHMuZmVkb3JhcHJvamVjdC5v
cmcKRmVkb3JhIENvZGUgb2YgQ29uZHVjdDogaHR0cHM6Ly9kb2NzLmZlZG9yYXByb2plY3Qub3Jn
L2VuLVVTL3Byb2plY3QvY29kZS1vZi1jb25kdWN0LwpMaXN0IEd1aWRlbGluZXM6IGh0dHBzOi8v
ZmVkb3JhcHJvamVjdC5vcmcvd2lraS9NYWlsaW5nX2xpc3RfZ3VpZGVsaW5lcwpMaXN0IEFyY2hp
dmVzOiBodHRwczovL2xpc3RzLmZlZG9yYXByb2plY3Qub3JnL2FyY2hpdmVzL2xpc3Qvc2VsaW51
eEBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwo=

--===============7580811246750935028==--