Help with squid / squidGuard

Daniel J Walsh dwalsh at redhat.com
Tue Feb 10 14:34:35 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Arthur Dent wrote:
> On Thu, Feb 05, 2009 at 11:40:10PM +0100, Dominick Grift wrote:
>> Op donderdag 05-02-2009 om 22:33 uur [tijdzone +0000], schreef Arthur
>> Dent:
>>
>>> Am I right in thinking that all this would be unnecessary if the files
>>> were in /var/lib/squidGuard ?
>> No, there is policy missing in the squid module i think. We appended
>> that policy by installing our module.
>>
>> Nonetheless, the proper location is still /var/lib/squidGuard i think.
>>
>> I just was not sure if some part of the policy i wrote is working as
>> expected since the location you use is /var/squidGuard instead.
>>
>> Seems that it is working though so that is fine.
> 
> Thanks again.
> 
> I will see what happens overnight.
> 
> Just a final thought however. Both squid and squidGuard are installed
> via yum from the standard repositories. I still have a copy of the
> original squidGuard.conf file and here are the first 8 lines:
> 
> #
> # CONFIG FILE FOR SQUIDGUARD
> #
> # See http://www.squidguard.org/config/ for more examples
> #
> 
> dbhome /var/squidGuard/blacklists
> logdir /var/log/squidGuard
> 
> So it seems that is where I got my file layout from!
> 
> At least I know I not completely crazy...
> 
> Thanks once again
> 
> Mark
> 
> 
> 
> ------------------------------------------------------------------------
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
A simpler solution would have been to add a context that squid can write.

# semanage fcontext -a -t squid_cache_t '/var/squidGuard(/.*)?'
# restorecon -R -v /var/squidGuard

Does squid try to write to  /var/log/squidGuard?

What does /var/www/cgi-bin/squidGuard.cgi and
/var/www/cgi-bin/squidGuard-simple.cgi do?

Do they need to read the
/var/squidGuard?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmRkHsACgkQrlYvE4MpobNI2wCgzsRZDrwzSbid0NTzjPsc0tuI
vJYAoNqRN4Vscnbvo1yln4J2KP1X4G3t
=xCul
-----END PGP SIGNATURE-----




More information about the fedora-selinux-list mailing list