-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/23/2011 09:21 PM, Daniel B. Thurman wrote: > > I am trying to bring kmotion under control of SeLinux, > so how can I do it? > > 1) I tried context httpd_exec_t and httpd_t, but neither seems to work, > so out of the zillions of options which do I use as these files are > apache > and python programs. (See log below): > > semanage fcontext -a -t httpd_t '/www/kmotion/www/vhosts/kmotion' > semanage fcontext -a -t httpd_t '/www/kmotion/www/www/cgi_bin' > semanage fcontext -a -t httpd_t '/www/kmotion/www/www/cgi_bin/*' > semanage fcontext -d -t httpd_t '/www/kmotion/www/vhosts/kmotion' semanage fcontext -d -t httpd_t '/www/kmotion/www/www/cgi_bin' semanage fcontext -d -t httpd_t '/www/kmotion/www/www/cgi_bin/*' semanage fcontext -a -t httpd_sys_content_t "/www(/.*)?" semanage fcontext -a -t httpd_sys_script_exec_t "/www/kmotion/www/www/cgi_bin(/.*)?" restorecon -R -v -F /www I think that should do it -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk4Dk4MACgkQMlxVo39jgT/2fwCdGCGuMYKIa1GzNRX06mPU+x0I q1MAn3HOzG1R5uqqja58kzu1/9SQSxpl =fBEx -----END PGP SIGNATURE----- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
