Small bug in apache.fc

Harry Hoffman hhoffman at
Sat Apr 1 23:15:42 UTC 2006


apache.fc allows for webroot location to be under /srv but selinux
currently stops apache from searching under /srv (at least this seems to
be the case to me, but I'm fairly new to selinux).

From: file_contexts/program/apache.fc
/srv/([^/]*/)?www(/.*)?         system_u:object_r:httpd_sys_content_t

a ls -lZ of /  shows:
drwxr-xr-x  root     root     system_u:object_r:default_t      srv

running audit2allow -i /var/log/messages shows:
allow httpd_t default_t:dir search;

adding a local.te policy with:
allow httpd_t default_t:dir search;

fixes the problem and allows httpd to start without issue.


Harry Hoffman
Integrated Portable Solutions, LLC
877.846.5927 ext 1000

More information about the fedora-selinux-list mailing list