SELinux policy enabled; httpd running as context unconfined_u:system

CentOS6.0 下默认开selinux时出现httpd 报“SELinux policy enabled; httpd running as context unconfined_u:system”的解决方案

安装audit2allow 参看http://wiki.eri.ucsb.edu/sysadm/SELinux

yum install policycoreutils-python
To allow httpd to use nfs dirs in CentOS-6
setsebool -P httpd_use_nfs 1
setsebool -P httpd_enable_homedirs 1

文章来源： http://www.xinotes.org/notes/note/1156/

Open /var/log/httpd/error_log, you may see a line like this: 

 
 

  
  
[Wed Apr 13 15:50:35 2011] [notice] SELinux policy enabled; httpd running as context unconfined_u:system_r:httpd_t:s0
 
 

These are the steps to fix: 

 
 
If the directory resides in a user home directory: 

   
   

    
    
# setsebool -P httpd_read_user_content 1

   
   
Create a policy package from the audit log: 

   
   

    
    
# grep httpd /var/log/audit/audit.log | audit2allow -M mypol
******************** IMPORTANT ***********************
To make this policy package active, execute:

semodule -i mypol.pp

   
   
Apply the policy package just created 

   
   

    
    
# semodule -i mypol.pp

   
   
Restart apache httpd: 

   
   

    
    
# apachectl restart