Allowing a apache to access a user folder by using semanage

Josef Meile jmeile at hotmail.com
Wed May 9 21:22:21 UTC 2007


> The semanage command should have set httpd_sys_content_t, not httpd_t.
> 
> 	semanage fcontext -a -t httpd_sys_content_t "/home/zopeuser/data(/.*)?"
> 	restorecon -R /home/zopeuser/data
> 
> ... I guess the restorecon will fail on a few symlinks again, but get
> the rest right. I'd prefer restorecon over "chcon -t" just to make sure
> the labeling rules are right, and woun't get wrong if you ever do a full
> "touch /.autorelabel".
Yup, that works too. Thanks

Josef




More information about the fedora-selinux-list mailing list