Re: how do I make "setenforce 0" permanent?
- From: ebenZEROONE@xxxxxxxxxxx (Hactar)
- Date: Fri, 5 Dec 2008 20:29:17 -0500
In article <cb0cc083-da98-4944-9d11-c6f37ea3ccd6@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
Bennett Haselton <bennett@xxxxxxxxxxxxx> wrote:
Anyway, like I said all I want to do is have a CGI script read from /
var/log/httpd/error_log in real time, but of all the people I've
asked, no one knows how to do that without making it setuid.
Write a small daemon or helper program in e.g. C. Make _it_ SGID to
whatever group owns /var/log/httpd/error_log (make sure error_log has
group-write permission). Have your CGI script access or call that
'logger' does that for syslog already, so if the data doesn't have to be
in there in real time, your CGI script could use that and the C program
could periodically filter stuff from syslog into error_log.
-eben QebWenE01R@xxxxxxxxxxxxxxxxx royalty.mine.nu:81
Drive nail here > < for new monitor.