httpd with symbolic links and selinux enabled

Daniel J Walsh dwalsh at redhat.com
Wed Dec 2 20:05:34 UTC 2009


On 12/01/2009 11:47 PM, Tim wrote:
> On Tue, 2009-12-01 at 12:04 -0500, Daniel J Walsh wrote:
>> You need to fix the context to match that in public_html
>>  
>> chcon -R -t httpd_user_content_t foo 
>>  
>> Would do it.
> 
> If that's the problem (just SELinux preventing serving), you'd also have
> to keep re-changing the contexts, every time there was a SELinux
> relabel, and every time you created new files in that location.  Or, set
> a policy rule so that files, automatically get suitable contexts for
> those file locations.
> 
Yes that is true.

I have also added a boolean to allow apache to read all files in the homedir, 
httpd_read_user_content

setsebool -P httpd_read_user_content 1




More information about the fedora-list mailing list