Re: Question

Lukas Vrabec <[email protected]> Sun, 12 Apr 2020 22:07:19 +0200

Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>

On 4/12/20 9:15 PM, Jonathan Aquilina wrote:
> Hi guys i have a question regarding SEL.
> 
> I have a VM that is on centos 7 and before I had an issue with wordpress
> where it was in read only mode and i ran
> 
> chcon -R unconfined_u:object_r:httpd_sys_rw_content_t:s0
> /var/www/html/wordpress
> 
>  
> 
> to put it in read write mode for me to update the site
> 
>  
> 
> I then ran
> 
>  
> 
> restorecon -rv /var/www/html to restore things to the way they are.
> 
>  
> 
> since then i have not had to run the commands again to update the site
> with any other updates
> 
>  
> 
> what exactly is happening
> 
>  
> 
> Regards,
> 
> Jonathan
> 
> 
> _______________________________________________
> selinux mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
> 

Hi Jonathan,

Can you please share the reproducer ? Also, can you please share SELinux
denials you saw in past (maybe they're still in audit.log) ?

From your e-mail it's hard to decide what really happened on the system.
 Btw. Did you changed value of any httpd_* boolean?
Please attach output of:
# semanage boolean -l | grep httpd

Thanks,
Lukas.






-- 
Lukas Vrabec
SELinux Evangelist,
Senior Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]

signature.asc (application/pgp-signature, 488 B)