[Bug 324271] RFE and Patch: Provide enhanced mod_dav_svn /etc/httpd/conf.d/subversion.conf file.
bugzilla at redhat.com
bugzilla at redhat.com
Fri Jul 25 20:28:58 UTC 2008
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: RFE and Patch: Provide enhanced mod_dav_svn /etc/httpd/conf.d/subversion.conf file.
https://bugzilla.redhat.com/show_bug.cgi?id=324271
edwin at tenbrink-bekkers.nl changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |edwin at tenbrink-bekkers.nl
------- Additional Comments From edwin at tenbrink-bekkers.nl 2008-07-25 16:28 EST -------
I would like to add the following additional explanation concerning the rights
(owner, group) and SELinux configuration to your file.
Of course, you should read /opt/svn as the location of your repositories, this
is an example path. IMHO you should use something like this to get your
repository up and running through Apache:
# chown -R apache.apache /opt/svn
# /usr/sbin/setsebool -P httpd_builtin_scripting=1
# /usr/sbin/setsebool -P httpd_enable_cgi=1
# /usr/sbin/semanage fcontext -a -t httpd_sys_content_t '/opt/svn(/.*)?'
# /usr/sbin/semanage fcontext -a -t httpd_sys_content_rw_t
'/opt/svn/[^/]+/(dav|db)(/.*)?'
# /usr/sbin/semanage fcontext -a -t httpd_cvs_script_exec_t
'/opt/svn/[^/]+/hooks(/.*)?'
# /sbin/restorecon -Rv /opt/svn
This should get rid of your suggested turning off enforcing.
BTW: Shouldn't there be a way to have the SELinux context set-up correctly when
creating the repository in the first place instead of doing this manually?
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
More information about the fedora-triage-list
mailing list