Re: Allowing a apache to access a user folder by using semanage

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2007-05-09, Josef Meile <jmeile@xxxxxxxxxxx> wrote:
> Ok, then is httpd_sys_content_t the right one? I solve it as follows:
>
> semanage fcontext -a -t httpd_t "/home/zopeuser/data(/.*)?"
> chcon -R -t httpd_sys_content_t /home/zopeuser/data
>

The semanage command should have set httpd_sys_content_t, not httpd_t.

	semanage fcontext -a -t httpd_sys_content_t "/home/zopeuser/data(/.*)?"
	restorecon -R /home/zopeuser/data

... I guess the restorecon will fail on a few symlinks again, but get
the rest right. I'd prefer restorecon over "chcon -t" just to make sure
the labeling rules are right, and woun't get wrong if you ever do a full
"touch /.autorelabel".


  -jf

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux