The semanage command should have set httpd_sys_content_t, not httpd_t. semanage fcontext -a -t httpd_sys_content_t "/home/zopeuser/data(/.*)?" restorecon -R /home/zopeuser/data ... I guess the restorecon will fail on a few symlinks again, but get the rest right. I'd prefer restorecon over "chcon -t" just to make sure the labeling rules are right, and woun't get wrong if you ever do a full "touch /.autorelabel".
Yup, that works too. Thanks Josef -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list