On Wed, 26 Sep 2007 21:17:39 -0400
Steve Grubb <sgrubb redhat com> wrote:
> AFAIK, selinux only knows about a couple servers, like apache, having
> data in /srv. If SE Linux is going to protect the data, a standard
> mapping between /srv and /var for everything should be worked out so
> that policy can be adapted.
Therein lies the problem. /srv/ is open ground for sysadmins to use,
we can't prepopulate it with anything, and we can't assume what the
local admin will use for a scheme. /srv/<site>/{web,ftp,backup}
or /srv/{web,ftp,backup}/<site> or some other combo.
--
Jesse Keating
Fedora -- All my bits are free, are yours?
Attachment:
signature.asc
Description: PGP signature