Selinux .vs. Apache

Thomas Cameron thomas.cameron at camerontech.com
Sun Nov 30 00:30:23 UTC 2008


Michal Jaegermann wrote:
> On Sat, Nov 29, 2008 at 11:22:45PM +0100, Matej Cepl wrote:
>> I would dare to ask -- why in the world you need webserver data 
>> in /srv? What would happen if you had them in /var/www/ where 
>> Fedora apache expects them (and where SELinux is more than happy 
>> to protect your server from many kinds of attack)?
> 
> Ever heard what 'VirtualHost' is?  You may have many of those on a
> single machine and you do not want to drop their corresponding files
> into one big haystack.
> 
> I have no idea if this is the case with OP but there could be really
> good reasons, contrary to what you think, when configurations other
> than defaults should/could be used.  These are only _defaults_ for
> crying out loud and if something is forcing defaults, or just makes
> hard enough to override those, then this something is plain broken
> by design.

If you don't understand enough about how the *defaults* work, maybe you 
should just stay the heck away from customization?

-- 
Thomas




More information about the fedora-test-list mailing list