-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/17/2012 03:45 AM, Matej Cepl wrote: > On 16.3.2012 18:49, David Quigley wrote: >> Short of educating web server administrators about SELinux and >> the correct labels for web resources I'm not sure what else can >> be done. You don't want to use restorecond to make sure the >> directories are labeled properly because you could potentially >> use an improperly configured file upload capability to drop >> whatever pages you want onto the server and it would fixup the >> labels. Unfortunately education is the best option but not the >> easiest. > > I don't care that much about web admins (although, following the > saga of twit.tv being hacked again and again by scripts which could > be most likely prevented by SELinux is a sad sight), but this is > apache.org, for $DEITY sake! They should know more than your > average web admin. > > Matěj > Here is the current httpd man page. http://people.fedoraproject.org/~dwalsh/SELinux/httpd_selinux.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9kVswACgkQrlYvE4MpobMO9wCgwCR8+Xml+TVOYp7IKDXEgCW6 LmMAn3T9Ble+AVUBhFnkyrDqcLV7JYPs =Gjzi -----END PGP SIGNATURE----- -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
