WaSh

From HaskellWiki
Revision as of 11:15, 21 March 2007 by JonFairbairn (talk | contribs) (Random jottings on WASH)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Random Jottings on WASH

SELinux

To run ghc-compiled WASH CGI on Fedora (Core 6) you need to build an SELinux policy that allows CGI scripts to execute memory (because ghc runtime system execs mem).

cat <<EOF > local.te
module local 1.0;

require {
        class process execmem;
        type httpd_sys_script_t; 
        role system_r; 
};

allow httpd_sys_script_t self:process execmem;
EOF

checkmodule -M -m -o local.mod local.te
semodule_package -o local.pp -m local.mod
su -c 'semodule -i local.pp'