Re: SELinux Context for web server data files in another part of filesystem?

Jeffrey Walton via selinux <[email protected]> Tue, 19 Nov 2024 19:49:40 -0500
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <CAH8yC8mgsjoNNXCMpYmqAaQkT4mLqgm-sMM1PCL3SyTWV0F2uQ@mail.gmail.com>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