xpra icon
Bug tracker and wiki

Changes between Version 30 and Version 31 of Clients/HTML5


Ignore:
Timestamp:
06/18/20 06:20:59 (3 months ago)
Author:
Antoine Martin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Clients/HTML5

    v30 v31  
    1818* to use an [https://www.nginx.com/ nginx] web server as proxy see here: [/wiki/Nginx]
    1919* using [https://httpd.apache.org/ apache] as proxy: [/wiki/Apache]
     20
     21[[BR]]
     22
     23
     24=== SELinux and Proxies ===
     25On some distributions (ie: Fedora, RHEL / CentOS), SELinux may block the connection from the web server to the xpra server port.
     26There are at least 3 solutions to this problem, from the most secure to the least:
     27* add a policy to allow apache to connect only to the xpra port:
     28{{{
     29require {
     30        type httpd_t;
     31        type xpra_port_t;
     32        class tcp_socket name_connect;
     33}
     34allow httpd_t xpra_port_t:tcp_socket name_connect;
     35}}}
     36* allow apache to connect to all ports:
     37{{{
     38setsebool -P httpd_can_network_connect on
     39}}}
     40* disable SELinux
    2041}}}
    2142