Mastering Linux Security and Hardening - Second Edition

Protecting your web server

Look at the output of the getsebool -a | grep 'http' command again, and you'll see that most httpd-related Booleans are turned off by default, with only a few turned on. There are two of them that you'll commonly need to turn on when setting up a web server.

If you ever need to set up a website with some sort of PHP-based content management system, such as Joomla or WordPress, you may have to turn on the httpd_unified Boolean. With this Boolean turned off, the Apache web server won't be able to interact properly with all of the components of the PHP engine:

[donnie@localhost ~]$ getsebool httpd_unifiedhttpd_unified --> off[donnie@localhost ~]$ sudo setsebool -P httpd_unified on[sudo] password for donnie:[donnie@localhost ...