SELinux policy enabled; httpd running as context unconfined_u:system

CentOS6.0 下默认开selinux时出现httpd 报“SELinux policy enabled; httpd running as context unconfined_u:system”的解决方案

安装audit2allow 参看http://wiki.eri.ucsb.edu/sysadm/SELinux

yum install policycoreutils-python
To allow httpd to use nfs dirs in CentOS-6
setsebool -P httpd_use_nfs 1
setsebool -P httpd_enable_homedirs 1

文章来源： http://www.xinotes.org/notes/note/1156/

Open /var/log/httpd/error_log, you may see a line like this: 

  
  
  
  

   
   
   
   
[Wed Apr 13 15:50:35 2011] [notice] SELinux policy enabled; httpd running as context unconfined_u:system_r:httpd_t:s0
  
  
  
  

These are the steps to fix: 

  
  
  
  

   
   
   
   
If the directory resides in a user home directory:  
    
 
     
# setsebool -P httpd_read_user_content 1
 
    

   
   
   
   
Create a policy package from the audit log: 
 
    
 
     
# grep httpd /var/log/audit/audit.log | audit2allow -M mypol
******************** IMPORTANT ***********************
To make this policy package active, execute:

semodule -i mypol.pp
 
    

   
   
   
   
Apply the policy package just created 
 
    
 
     
# semodule -i mypol.pp
 
    

   
   
   
   
Restart apache httpd: 
 
    
 
     
# apachectl restart