Re: Selinux .vs. Apache

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Nov 29, 2008 at 19:01:40 -0500,
  Konstantin Ryabitsev <icon@xxxxxxxxxxxxxxxxx> wrote:
> 
> Come on, now -- all you have to do is label the files correctly. E.g.
> I'm pretty sure the OP's problems would be resolved by running "chcon
> -R -t http_sys_content_t" on his web tree. You do *not* want apache to
> read just any file on your filesystem -- it's not "broken by design"
> but "made safer by design."

You want to use semanage to make sure you don't get burnt later during a
relabel. And once you do that it is easier (and a good double check) to
use restorecon rather than chcon to relabel the files.

I find chcon is more useful for testing things rather than configuring things.

-- 
fedora-test-list mailing list
fedora-test-list@xxxxxxxxxx
To unsubscribe: 
https://www.redhat.com/mailman/listinfo/fedora-test-list

[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]

  Powered by Linux