Re: Trying again: why am I getting denials in a directory that has been labeled..

Lukas Vrabec <[email protected]> Sat, 30 Jun 2018 11:22:43 +0200

Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>

On 06/29/2018 10:15 PM, mark wrote:
> As Lukas suggested, I tried to relabel the file. It didn't work, and the
> reason is this: we have the web under our own root directory, not under
> /var/www. We had done an semanage fcontext -e /var/www <ourpath>. When I
> tried to relabel, it suggested I try to relabel using the /var/www path,
> which won't work.
> 
> Is there any way around this?
> 
> /<ourpath>/htdocs/<website>/cgi-bin/data/<the probelematic file>
> 
>     mark
> 

Hi,

Could you attach complete outputs from semanage/ls (-Z)/ matchpathcon
commands? I would like to reproduce it to help you find issue.

Lukas.

_______________________________________________
> selinux mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[email protected]/message/OY44G67IIGE3VFD7KEHZH3UFXYLZV56F/
> 


-- 
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]/message/AKZN4DCCF5PKZH3C7IKDQ4VYU2MYRI25/

signature.asc (application/pgp-signature, 488 B)