Re: SELinux Context for web server data files in another part of filesystem?
Jeffrey Walton via selinux <[email protected]> Tue, 19 Nov 2024 21:36:13 -0500
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <CAH8yC8mnHDNoLgnAz1OJh+yM+MbKYcMPutDFLfR2C128AAav8w@mail.gmail.com> |
T24gVHVlLCBOb3YgMTksIDIwMjQgYXQgODo1M+KAr1BNIGp1c3RpbmEgY29sbWVuYSB+Yml6DQo8 anVzdGluYUBjb2xtZW5hLmJpej4gd3JvdGU6DQo+DQo+IE9uIDExLzE5LzI0IDE2OjQ5LCBKZWZm cmV5IFdhbHRvbiB3cm90ZToNCj4NCj4gPiBCdXQgSSBkb24ndCB0aGluayB0aGUgYW5zd2VyIGlz IGFuIGFsbG93IHJ1bGUuIEkgX3RoaW5rXyAvdmFyL2Z0Yy1kYXRhDQo+ID4gbmVlZHMgdG8gdXNl IGh0dHBkX3N5c19jb250ZW50X3QsIG5vdCB2YXJfdC4NCj4gVGhlICJodHRwZF9zeXNfY29udGVu dF90IiBzZWxpbnV4IGNvbnRleHQgaXMgdXN1YWxseSBkZWZpbmVkIGluIGFuDQo+IHNlbGludXgg cG9saWN5IG1vZHVsZSBkZXBlbmRlbmN5IHdoZW4gYXBhY2hlIGlzIGluc3RhbGxlZCBpbiBmZWRv cmEuIEknbQ0KPiBub3Qgc3VyZSBhbnl0aGluZyBzcGVjaWZpYyBoYXMgYmVlbiBkZXZlbG9wZWQg Zm9yIG5naW54IHBlciBzZS4geW1tdiwNCj4gd2hhdGV2ZXIgc2VsaW51eCBwb2xpY2llcyBoYXZl IGJlZW4gZGV2ZWxvcGVkIGFuZCBwYWNrYWdlZCBmb3IgY29tbW9uDQo+IHNlcnZlciBzb2Z0d2Fy ZS4gSXQncyBiZWVuIGEgd2hpbGUsIHRoaW5ncyBhcmUgcmF0aGVyIG91dGRhdGVkIG5vdywgYnV0 DQo+IEkgYmVsaWV2ZSBJJ3ZlIGhhZCBiZXR0ZXIgbHVjayBpbnN0YWxsaW5nIGFwYWNoZSBhbmQg anVzdCBub3QgdXNpbmcgaXQNCj4gYnV0IGxlYXZpbmcgaXQgaW5zdGFsbGVkIHdoaWxlIHJ1bm5p bmcgbmdpbngsIGJlY2F1c2UgdGhlIHNlbGludXgNCj4gcG9saWNpZXMgdGhhdCBoYXZlIGJlZW4g ZGV2ZWxvcGVkIGluIHRoZSBwYXN0IGZvciBhcGFjaGUgdXN1YWxseSAianVzdA0KPiB3b3JrIiB3 aXRoIG5naW54LCAiaHR0cGRfc3lzX2NvbnRlbnRfdCJhbmQgZXZlcnl0aGluZywgYWx0aG91Z2gg SSBkb24ndA0KPiBrbm93IHRoYXQgcGlnZ3liYWNraW5nIHRvbyBtdWNoIHNvZnR3YXJlIGlzIHRo ZSAicmlnaHQiIHNvbHV0aW9uIGVpdGhlci4NCg0KWWVhaCwgSSBiZWxpZXZlIHlvdSdyZSByaWdo dCBhYm91dCB0aGluZ3MganVzdCB3b3JraW5nIHdpdGggTmdpbngNCmJlY2F1c2Ugb2YgQXBhY2hl Lg0KDQpJIGRpZCBjaGVjayB0aGluZ3MgYWZ0ZXIgdGhlIGluaXRpYWwgTmdpbnggaW5zdGFsbCwg YmVmb3JlIGFueQ0KbW9kaWZpY2F0aW9ucyBoYXBwZW5lZC4gSGVyZSdzIHdoYXQgSSBmb3VuZDoN Cg0KICAgKiBkZWZhdWx0IGNvbmYgZmlsZSBpcyAvZXRjL25naW54L25naW54LmNvbmYNCiAgICog ZGVmYXVsdCBkb2N1bWVudCByb290IGlzIC91c3Ivc2hhcmUvbmdpbngvaHRtbA0KDQpBbmQ6DQoN CiAgICMgbHMgLVogL3Vzci9zaGFyZS9uZ2lueC9odG1sDQogICBzeXN0ZW1fdTpvYmplY3Rfcjpo dHRwZF9zeXNfY29udGVudF90OnMwIGluZGV4Lmh0bWwNCiAgIHN5c3RlbV91Om9iamVjdF9yOmh0 dHBkX3N5c19jb250ZW50X3Q6czAgbmdpbngtbG9nby5wbmcNCiAgIC4uLg0KDQpJIGJlbGlldmUg InN5c3RlbV91Om9iamVjdF9yOmh0dHBkX3N5c19jb250ZW50X3Q6czAiIGlzIHRoZSBzYW1lIGFz DQpBcGFjaGUgYXQgL3Zhci93d3cvaHRtbCAoYW5kIGZyaWVuZHMpLiBJbmRlZWQsIHdoZW4gSSBj cmVhdGVkDQovdmFyL3d3dy9odG1sIGFuZCByZXN0b3JlY29uJ2Q6DQoNCiAgICMgbHMgLVogL3Zh ci8NCiAgIHN5c3RlbV91Om9iamVjdF9yOmh0dHBkX3N5c19jb250ZW50X3Q6czAgaHRtbA0KICAg Li4uDQogICAjIGxzIC1aIC92YXIvd3d3Lw0KICAgc3lzdGVtX3U6b2JqZWN0X3I6aHR0cGRfc3lz X2NvbnRlbnRfdDpzMCBodG1sDQoNCihUaGVyZSdzIHByb2JhYmx5IGEgd2F5IHRvIGxpc3QgdGhl IHJ1bGVzIGZvciAvdmFyL3d3dygvLiopPyAob3INCndoYXRldmVyIHRoYXQgUkUgc3ludGF4IGlz KSwgYnV0IEkgZG9uJ3Qga25vdyB0aGVtKS4NCg0KUmVsYXRlZCwgSSByZWNlbnRseSBhZGRlZCBt b3JlIHRvcGljcyB0byBGZWRvcmEncyBkb2NzIG9uIE5naW54IGF0DQo8aHR0cHM6Ly9mZWRvcmFw cm9qZWN0Lm9yZy93aWtpL05naW54Pi4gSXQgdG91Y2hlcyBvbiBTRUxpbnV4IHVuZGVyDQp0aGUg c2VjdGlvbiBGaWxlIFBlcm1pc3Npb25zLiBQbGVhc2UgZmVlbCBmcmVlIHRvIG1ha2UgY29ycmVj dGlvbnMuDQoNCkplZmYNCi0tIApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXwpzZWxpbnV4IG1haWxpbmcgbGlzdCAtLSBzZWxpbnV4QGxpc3RzLmZlZG9yYXBy b2plY3Qub3JnClRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gc2VsaW51eC1sZWF2ZUBs aXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpGZWRvcmEgQ29kZSBvZiBDb25kdWN0OiBodHRwczovL2Rv Y3MuZmVkb3JhcHJvamVjdC5vcmcvZW4tVVMvcHJvamVjdC9jb2RlLW9mLWNvbmR1Y3QvCkxpc3Qg R3VpZGVsaW5lczogaHR0cHM6Ly9mZWRvcmFwcm9qZWN0Lm9yZy93aWtpL01haWxpbmdfbGlzdF9n dWlkZWxpbmVzCkxpc3QgQXJjaGl2ZXM6IGh0dHBzOi8vbGlzdHMuZmVkb3JhcHJvamVjdC5vcmcv YXJjaGl2ZXMvbGlzdC9zZWxpbnV4QGxpc3RzLmZlZG9yYXByb2plY3Qub3JnCkRvIG5vdCByZXBs eSB0byBzcGFtLCByZXBvcnQgaXQ6IGh0dHBzOi8vcGFndXJlLmlvL2ZlZG9yYS1pbmZyYXN0cnVj dHVyZS9uZXdfaXNzdWUK