SELinux/httpd integration

[Yuichi Nakamura]

Joe Orton wrote:
> I'm going to add this text to /etc/httpd/conf.d/subversion.conf since it
> (currently :) works out-of-the-box: is the terminology "labelled with a
> context" correct?
> #
> # Example configuration to enable HTTP access for a directory
> # containing Subversion repositories, "/var/www/svn".  Each repository
> # must be readable and writable by the 'apache' user.  Note that if
> # SELinux is enabled, the repositories must be labelled with a context
> # which httpd can write to; this will happen by default for
> # directories created in /var/www.
> #

As far as I know, context writable by httpd is not prepared.
So I think type like httpd_rw_t I suggested before will be necessary.


---
Yuichi Nakamura
Japan SELinux Users Group(JSELUG)
http://www.selinux.gr.jp/