Re: SELinux & apache/httpd access to /home/*/www

[Stephen Smalley <sds epoch ncsc mil>]

On Fri, 2004-09-17 at 08:17, Cream[DONut] wrote:
> could it be this one missing?
> 
> allow httpd_t home_root_t:dir { read };

It should only require search permission to home_root_t and
user_home_dir_t in order to lookup /home/<username>/www, and then have
read permission to httpd_user_content_t.  Naturally, someone (Dan,
Russell, me, whoever) should verify that, but in the past, that was
sufficient.

-- 
Stephen Smalley <sds epoch ncsc mil>
National Security Agency