Exercise

Allow Apache to Send Email Exercise

Task

Find the SELinux boolean that lets Apache send email on servera, then turn it on permanently.

Host: servera

Find the appropriate SELinux boolean

The selinux-policy-doc package installs a man page for each SELinux domain, named with an _selinux suffix.
```
sudo dnf install selinux-policy-doc -y
man -k _selinux | grep httpd
man 8 httpd_selinux
```
Type /mail and press Enter to search, press n for the next match, and press q to quit.

Every httpd boolean in one place httpd_selinux(8) lists the booleans for Apache. httpd_can_sendmail is the one that allows it to send mail.
View the current value of the boolean
```
getsebool httpd_can_sendmail
sudo semanage boolean -l | grep httpd_can_sendmail
```
semanage shows two values in parentheses: the current value, then the default.
Permanently set the boolean
```
sudo setsebool -P httpd_can_sendmail on
```

Verify the boolean is set

getsebool httpd_can_sendmail
sudo semanage boolean -l | grep httpd_can_sendmail

Both values now read on.

Clean up

sudo setsebool -P httpd_can_sendmail off
sudo dnf remove -y selinux-policy-doc