Serving data from a DVD via httpd

[Uno Engborg]

Mikkel L. Ellertson skrev:
> Uno Engborg wrote:
>> I'm trying to mount a DVD inside /var/www/html and serve it using httpd.
>> The problem is that the DVD have the wrong SELinux context
>>
>> I try to do somethng like this:
>>
>> mount  -o context=system_u:object_r:httpd_sys_content_t,ro /dev/cdrom 
>> /var/www/html/mymountpoint
>>
>> but that doen't change the context on the mouned dvd, and 
>> consequently, apache fails to serve it.
>> If I run audit2allow it tells me to:
>> allow httpd_t iso9660_t:dir getattr;
>>
>> I supose I could make such a module, but I rather not as there might 
>> be more dvds mounted elsewhere
>> in the system that should remain protected from apache.
>>
>> Ideas anyone?
>>
>> Regards
>> Uno Engborg
>>
> The context is wrong - try replacing it with:
>
> context=system_u:object_r:httpd_sys_content_t:s0
>
> The :s0 is important.
Yes it is!
Thanks for spottin it

/uno