squid folder permissions

David Niemi drn_temp2 at rogers.com
Sun Apr 24 02:43:06 UTC 2005


On Sun, 2005-24-04 at 02:23 +0200, Alexander Dalloz wrote:
> Am So, den 24.04.2005 schrieb David Niemi um 2:19:
> 
> > I am trying to setup squid as a transparent proxy server / accelerator
> > and instead of using the default /var/spool/squid I'd like to
> > use /tmp/spool/squid.  I'd like to use this drive as I have a lot more
> > I tried creating the directories and setting the same permissions and
> > owners as is visible from checking the file properties with nautilus
> > always with the same error.
> 
> You probably missed the SELinux context settings.
> 
> http://fedora.redhat.com/docs/selinux-faq-fc3/
> 
> Alexander

Darn, I'd forgotten about SELinux which I'd enabled as this is acting as
a Firewall also.

Originally the permissions from what I'd created
 [root at rhonda /]# ls -alZ /tmp/spool
 drwxr-x---  squid    squid    root:object_r:tmp_t  squid

Permissions of the original squid spool folder
 [root at rhonda /]# ls -alZ /var/spool
 drwxr-x---  squid    squid    system_u:object_r:squid_cache_t  squid

Changing the policies
 [root at rhonda spool]# chcon -R -t squid_cache_t squid/
 [root at rhonda spool]# ls -alZ /tmp/spool
 drwxr-x---  squid    squid    root:object_r:squid_cache_t squid

And again, I also tried the -R option.
 [root at rhonda /]# restorecon -v /tmp/spool

After trying to start again the squid cache log has:
 2005/04/24 01:51:03| /tmp/spool/squid: (13) Permission denied
 FATAL:  Failed to verify one of the swap directories, Check cache.log
        for details.  Run 'squid -z' to create swap directories
        if needed, or if running Squid for the first time.
 Squid Cache (Version 2.5.STABLE9): Terminated abnormally.

Any other suggestions?

I have it working using the originally created directory which should do
me anyway but it would be nice to know how abd where I am doing things
wrong.  Next step will be trying to decifer the SELinux information
contained in the other links.

Thanks
  Dave




More information about the fedora-list mailing list