Help with squid / squidGuard
Daniel J Walsh
dwalsh at redhat.com
Tue Feb 10 14:34:35 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Arthur Dent wrote:
> On Thu, Feb 05, 2009 at 11:40:10PM +0100, Dominick Grift wrote:
>> Op donderdag 05-02-2009 om 22:33 uur [tijdzone +0000], schreef Arthur
>> Dent:
>>
>>> Am I right in thinking that all this would be unnecessary if the files
>>> were in /var/lib/squidGuard ?
>> No, there is policy missing in the squid module i think. We appended
>> that policy by installing our module.
>>
>> Nonetheless, the proper location is still /var/lib/squidGuard i think.
>>
>> I just was not sure if some part of the policy i wrote is working as
>> expected since the location you use is /var/squidGuard instead.
>>
>> Seems that it is working though so that is fine.
>
> Thanks again.
>
> I will see what happens overnight.
>
> Just a final thought however. Both squid and squidGuard are installed
> via yum from the standard repositories. I still have a copy of the
> original squidGuard.conf file and here are the first 8 lines:
>
> #
> # CONFIG FILE FOR SQUIDGUARD
> #
> # See http://www.squidguard.org/config/ for more examples
> #
>
> dbhome /var/squidGuard/blacklists
> logdir /var/log/squidGuard
>
> So it seems that is where I got my file layout from!
>
> At least I know I not completely crazy...
>
> Thanks once again
>
> Mark
>
>
>
> ------------------------------------------------------------------------
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
A simpler solution would have been to add a context that squid can write.
# semanage fcontext -a -t squid_cache_t '/var/squidGuard(/.*)?'
# restorecon -R -v /var/squidGuard
Does squid try to write to /var/log/squidGuard?
What does /var/www/cgi-bin/squidGuard.cgi and
/var/www/cgi-bin/squidGuard-simple.cgi do?
Do they need to read the
/var/squidGuard?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkmRkHsACgkQrlYvE4MpobNI2wCgzsRZDrwzSbid0NTzjPsc0tuI
vJYAoNqRN4Vscnbvo1yln4J2KP1X4G3t
=xCul
-----END PGP SIGNATURE-----
More information about the fedora-selinux-list
mailing list