[RFC] /var versus /srv
sgrubb at redhat.com
Thu Sep 27 12:40:38 UTC 2007
On Wednesday 26 September 2007 23:28:11 Lamont Peterson wrote:
> Besides, SELinux won't care. You simply assign the right types to the
> per-site www/, ftp/, etc. directories and it will just work.
Assigning the right types to the directory will probably stop avc denials that
wanted to do file search - IOW a directory search. The files contained in
those directories will still likely have the wrong type.
If you are counting on the semantics of "cp" to preserve attributes, that is a
fragile assumption. The first time a relabel occurs, the file and directory
contexts will be reset to the defaults. You will either need to adjust policy
or create a lot of entries in /etc/selinux/restorecond.conf.
More information about the fedora-devel-list