On 16.3.2012 18:49, David Quigley wrote:
Short of educating web server administrators about SELinux and the correct labels for web resources I'm not sure what else can be done. You don't want to use restorecond to make sure the directories are labeled properly because you could potentially use an improperly configured file upload capability to drop whatever pages you want onto the server and it would fixup the labels. Unfortunately education is the best option but not the easiest.
I don't care that much about web admins (although, following the saga of twit.tv being hacked again and again by scripts which could be most likely prevented by SELinux is a sad sight), but this is apache.org, for $DEITY sake! They should know more than your average web admin.
Matěj -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
