more on selinux

[Stephen Smalley]

On Thu, 2006-12-07 at 10:20 -0600, olga at urbantimes.net wrote:
> Thank you! That solved the libc* error messages, and now syslog is
> working! However, it also relabeled my directories for virtual hosts and
> now they are not working.
> 
> I've been using this command to set virtual hosts with selinux:
> 
> chcon -R system_u:object_r:httpd_sys_content_t /home/vhost1
> 
> Is this the correct way to do it?

Not if you want it to survive relabels (including policy updates).  Use
semanage instead, e.g.:
	semanage fcontext -a -t httpd_sys_content_t "/home/vhost1(/.*)?"
	restorecon -R /home/vhost1

> Also mysql still doesn't want to start. Any suggestions here?

Are you trying to have it directly access that directory as well?

I'd suggest taking your questions to fedora-selinux-list though.

-- 
Stephen Smalley
National Security Agency