<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.3">
</HEAD>
<BODY>
In one of the Fedora CVS server setup, it says that if the<BR>
administrator wants to use a simple pserver remote string<BR>
such as:<BR>
<BR>
export CVSROOT=':pserver:<A HREF="mailto:dant@gold"><</A><A HREF="mailto:username@gold">username</A><A HREF="mailto:dant@gold">></A><A HREF="mailto:username@gold">@<systemname></A>:/cvs'<BR>
<BR>
Then one has to:<BR>
<BR>
1) /etc/xinetd.d/cvs:<BR>
server_args = -f --allow-root=/cvs pserver<BR>
2) ln -s /var/cvs /cvs<BR>
<BR>
But the problem here is that SELinux has no context for<BR>
the symbolic link /cvs, therefore deny's access.<BR>
<BR>
I tried setting context for /cvs by:<BR>
1) chcon -t cvs_data_t<BR>
<BR>
No dice. Does not work.<BR>
<BR>
To see if I can cvs login bypassing Selinux, I tried:<BR>
1) setenforce 0<BR>
2) cvs login (successfully)<BR>
3) setenforce 1<BR>
<BR>
So, what can I do to get SElinux to authorize the /cvs symbolic link access to /var/cvs?<BR>
<BR>
Thanks-<BR>
Dan
</BODY>
</HTML>