On Thu, 2004-10-07 at 09:20 +0200, Arjan van de Ven wrote: > sounds like apache should automatically relabel or something on start. > In one of my examples I mention users uploading data via ftp, where that is their only access. They wouldn't be able to restart httpd. > The goal of the default selinux policy is to be invisible unless you're > an exploit. Seems like it's not ;( Exactly.