Setting up mod_selinux

In the next set of recipes, we use an Apache module called mod_selinux to make Apache SELinux-aware and to support configurable transitions. In other words, the context in which Apache is running is no longer a statically defined context, but can be changed according to the administrators' needs.

In this recipe, we will install mod_selinux from its source as many Linux distributions do not offer it by default, even though it is a very powerful addition to the web server (which is also why support for mod_selinux is often called Apache/SELinux Plus).

How to do it…

You can set up mod_selinux through the following steps:

1. Download the sources from https://github.com/kaigai/mod_selinux.

2. Make sure that the Apache development headers (httpd-devel on Red Hat or Fedora systems) are installed.

3. Build and install the mod_selinux shared library for Apache using apxs:

   ~# apxs -c -i mod_selinux.c
   

   Note

   It may be possible that the build fails with an error about client_ip. If that is the...