The objective of this lab is to convert the SELinux log file with `sealert` and find entries for HTTP in the log file. You have a situation where Apache does not seem to be working properly and SELinux is presenting a problem. It is your job to look at the SELinux output log file, understand what the problem might be, and try to find a solution to the problem based on it. First, you will need to convert the contents of the `/var/log/audit/audit.log` SELinux log file to something that is more understandable to humans. Next, you need to see if you can find any entries in regard to the web server in the log file. You are basically fixing a problem with the misconfiguration of SELinux and making the Apache server functional again. When you do that, the Apache server should become available and you should verify that you solved the problem by accessing it from outside the server through your web browser.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Verify Image Loading Error and Investigate the Cause
Go to the website at http://<PUBLIC_IP_ADDRESS> and verify that the
LA_Logo.png
image does not load.Verify that the SELinux is the cause of the problem.
- Search the SELinux Logs for Problems
Search the SELinx logs with
ausearch
andsealert
to find the cause of the problem.Notice that
/var/www/LA_Logo.png
has a wrong label.
- Resolve the Image Loading Error
Change the label of of
/var/www/LA_Logo.png
to match the label of/var/www/index.html
.- Confirm the Error Was Resolved
Confirm that the problem has been fixed by trying to access the site at http://<PUBLIC_IP_ADDRESS> via your browser.