Re: SELinux Context for web server data files in another part of filesystem?
Sam Morris via selinux <[email protected]> Wed, 20 Nov 2024 12:03:30 +0000
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <[email protected]> |
T24gMTkvMTEvMjAyNCAyMTowOSwgSmVmZnJleSBXYWx0b24gdmlhIHNlbGludXggd3JvdGU6DQo+ IEhpIEV2ZXJ5b25lLA0KPiANCj4gSSBuZWVkIGEgbGl0dGxlIGhlbHAgaW4gZGV0ZXJtaW5pbmcg dGhlIHByb3BlciBTRUxpbnV4IGNvbnRleHQgZm9yDQo+IGRhdGEgZmlsZXMgc2VydmVkIGJ5IE5n aW54LiBTRUxpbnV4IGlzIGluIGVuZm9yY2luZyBtb2RlLiBUaGUgd2ViDQo+IHNlcnZlciBzdGF0 aWMgcGFnZXMgYXJlIGF0IC92YXIvd3d3L2h0bWwgKGZvciBoaXN0b3JpYyByZWFzb25zKS4gVGhl DQo+IGRhdGEgZmlsZXMgYXJlIGluIHRoZSBmaWxlc3lzdGVtIGluIC92YXIsIGJ1dCBhdCAvdmFy L2Z0Yy1kYXRhLg0KPiBUaGVyZSdzIGFsc28gYSBzb2Z0IHN5bWxpbmsgYXQgL3Zhci93d3cvaHRt bC9mdGMtZGF0YSB0aGF0IHBvaW50cyB0bw0KPiAvdmFyL2Z0Yy1kYXRhLg0KPiANCj4gL3Zhci93 d3cvaHRtbCBpcyB3b3JraW5nIGFzIGV4cGVjdGVkLCBidXQgSSBhbSBnZXR0aW5nIGEgNDAzIG9u IHRoZQ0KPiBkYXRhIGZpbGVzIGFuZCB0aGUgZGF0YSBmaWxlIGRpcmVjdG9yeS4gSS5lLiwgSSBn ZXQgYSA0MDMgb24NCj4gaHR0cDovL3d3dy5leGFtcGxlLmNvbS9mdGMtZGF0YSwgZXZlbiB0aG91 Z2ggdGhlIGRpcmVjdG9yeSBpcyB1Z28reC4NCj4gDQo+IFRoZSBmaWxlc3lzdGVtIHRvcG9sb2d5 IG9mIGludGVyZXN0IGlzOg0KPiANCj4gICAgICAgICAgICAgICstLS0tLS0rDQo+ICAgICAgICAg ICAgICB8IC92YXIgfA0KPiAgICAgICAgICAgICAgKy0tLS0tLSsNCj4gICAgICAgICAgICAgLyAg ICAgICAgXA0KPiAgICAgICAgICAgIC8gICAgICAgICAgXA0KPiAgICAgICAgICAgLyAgICAgICAg ICAgIFwNCj4gICAgICAgICB3d3cgICAgICAgICAgZnRjLWRhdGENCj4gICAgICAgICAvICAgICAg ICAgICAgIHwrIGZpbGUxLmRhdA0KPiAgICAgICAgLyAgICAgICAgICAgICAgfCsgZmlsZTIuZGF0 DQo+ICAgICAgIC8gICAgICAgICAgICAgICB8KyBmaWxlMy5kYXQNCj4gICAgIGh0bWwNCj4gICAg ICB8KyBpbmRleC5odG1sDQo+ICAgICAgfCsgc3ltbGluayB0byBmdGMtZGF0YQ0KPiANCj4gL3Zh ci93d3cgYW5kIC92YXIvd3d3L2h0bWwgaGF2ZQ0KPiBzeXN0ZW1fdTpvYmplY3RfcjpodHRwZF9z eXNfY29udGVudF90OnMwLiBUaGUgd2ViIHNlcnZlciBpcyBzZXJ2aW5nDQo+IHRoZSBzdGF0aWMg aHRtbCBmaWxlcyBPay4NCj4gDQo+IC92YXIvZnRjLWRhdGEgaGFzIHVuY29uZmluZWRfdTpvYmpl Y3Rfcjp2YXJfdDpzMC4gSSBhbSBub3QgdGhyaWxsZWQNCj4gYWJvdXQgdW5jb25maW5lZF91LCBh bmQgSSBhbSBwcmV0dHkgc3VyZSB2YXJfdCBzaG91bGQgYmUNCj4gaHR0cGRfc3lzX2NvbnRlbnRf dC4NCj4gDQo+IFRoZSBsYXN0IHdyaW5rbGUgaXMsIHRoZSBkYXRhIGZpbGVzIGdldCB1cGRhdGVk IG9uY2UgYSBkYXkgdXNpbmcgYQ0KPiBzeXN0ZW1kIHRpbWVyLiBTbyBzeXN0ZW1kIG5lZWRzIHdy aXRlIGFjY2VzcyB0byAvdmFyL2Z0Yy1kYXRhLg0KPiANCj4gV291bGQgc29tZW9uZSBoZWxwIG1l IHVuZGVyc3RhbmQgd2hhdCBTRUxpbnV4IGNvbnRleHQgc2hvdWxkIGJlIGZvcg0KPiAvdmFyL2Z0 Yy1kYXRhLCBwbGVhc2U/DQo+IA0KPiBUaGFua3MgaW4gYWR2YW5jZS4NCg0KU291bmRzIGxpa2Ug eW91IHdhbnQgdG8gY2hhbmdlIHRoZSBsYWJlbCBvZiAvdmFyL2Z0Yy1kYXRhIHRvIA0KaHR0cGRf c3lzX2NvbnRlbnRfdC4gVGhlcmUncyBhbiBleGFtcGxlIG9mIGhvdyB0byB1c2UgbWF0Y2hwYXRo Y29uLCANCnNlbWFuYWdlLWZjb250ZXh0IGFuZCByZXN0b3JlY29uIHRvIGFjaGlldmUgdGhpcyBo ZXJlOg0KDQpodHRwczovL2RvY3MucmVkaGF0LmNvbS9lbi9kb2N1bWVudGF0aW9uL3JlZF9oYXRf ZW50ZXJwcmlzZV9saW51eC85L2h0bWwtc2luZ2xlL3VzaW5nX3NlbGludXgvaW5kZXgjY3VzdG9t aXppbmctdGhlLXNlbGludXgtcG9saWN5LWZvci10aGUtYXBhY2hlLWh0dHAtc2VydmVyLWluLWEt bm9uLXN0YW5kYXJkLWNvbmZpZ3VyYXRpb25fY29uZmlndXJpbmctc2VsaW51eC1mb3ItYXBwbGlj YXRpb25zLWFuZC1zZXJ2aWNlcy13aXRoLW5vbi1zdGFuZGFyZC1jb25maWd1cmF0aW9ucw0KDQou Li4gYW5kIHRoZXJlJ3MgYWxzbyBodHRwX3NlbGludXgoOCkgd2hpY2ggbGlzdHMgYWxsIHRoZSBo dHRwZC1yZWxhdGVkIA0KdHlwZXMgYW5kIGJvb2xlYW5zIGV0Yy4NCg0KQXMgZm9yIHlvdXIgdGlt ZXIgdW5pdCwgdGhlIHNlcnZpY2UgaXQgbGF1bmNoZXMgbGlrZWx5IGFscmVhZHkgcnVucyBhcyAN CnVuY29uZmluZWRfc2VydmljZV90LCBzbyBTRUxpbnV4IHdvbid0IHByZXZlbnQgaXQgZnJvbSB3 cml0aW5nIHRvIA0KL3Zhci9mdGMtZGF0YS4gU28geW91IHNob3VsZG4ndCBuZWVkIHRvIGRvIGFu eXRoaW5nIGhlcmUgdW5sZXNzIHlvdSB3YW50IA0KdG8gd3JpdGUgYSBjdXN0b20gcG9saWN5IGZv ciB0aGUgc2VydmljZS4NCg0KSG93ZXZlciB0aGVyZSdzIG9uZSB0aGluZyB0aGF0IG1pZ2h0IHRy aXAgeW91IHVwOiBpZiB5b3UgdHJ5IHRvIHdyaXRlIA0KeW91ciBzZXJ2aWNlIGFzIGEgc2hlbGwg c2NyaXB0IG9uZS1saW5lciAoZS5nLiwgRXhlY1N0YXJ0PS9iaW4vYmFzaCAtYyANCicuLi4nKSB0 aGVuIHlvdSdsbCBmaW5kIGl0IGVuZHMgdXAgcnVubmluZyBhcyBpbml0cmNfdCwgd2hpY2ggaXMg DQpjb25maW5lZCAmIGxpa2VseSB3b24ndCBiZSBhbGxvd2VkIHRvIG1lc3Mgd2l0aCBmaWxlcyBs YWJlbGxlZCB3aXRoIA0KaHR0cF9zeXNfY29udGVudF90Lg0KDQojIHNlc2VhcmNoIC1UIC1zIGlu aXRfdCAtdCBzaGVsbF9leGVjX3QgLWMgcHJvY2Vzcw0KdHlwZV90cmFuc2l0aW9uIGluaXRfdCBz aGVsbF9leGVjX3Q6cHJvY2VzcyBpbml0cmNfdDsNCg0KWW91IG11c3QgcHV0IHlvdXIgc2NyaXB0 cyBpbnRvIGZpbGVzIGxhYmVsbGVkIHdpdGggYmluX3Qgb3IgdXNyX3QgKHRoZSANCmRlZmF1bHQg Zm9yIC91c3IvbG9jYWwvYmluLCAvdXNyL2xvY2FsL2xpYmV4ZWMsIGV0YykgYW5kIHRoYXQgd2F5 IHRoZXkgDQp3aWxsIGVuZCB1cCBydW5uaW5nIGFzIHVuY29uZmluZWRfc2VydmljZV90Lg0KDQoj IHNlc2VhcmNoIC1UIC1zIGluaXRfdCAtYyBwcm9jZXNzIC1EIHVuY29uZmluZWRfc2VydmljZV90 DQp0eXBlX3RyYW5zaXRpb24gaW5pdF90IGJpbl90OnByb2Nlc3MgdW5jb25maW5lZF9zZXJ2aWNl X3Q7DQp0eXBlX3RyYW5zaXRpb24gaW5pdF90IHVzcl90OnByb2Nlc3MgdW5jb25maW5lZF9zZXJ2 aWNlX3Q7DQoNCkxpa2VseSBmb3IgYW55IG5vbi10cml2aWFsIHNlcnZpY2UgeW91J3JlIGFscmVh ZHkgZG9pbmcgdGhhdCwgYnV0IEkgDQp0aG91Z2h0IEknZCBtZW50aW9uIGl0IGFueXdheSBiZWNh dXNlIHRoaXMgd2FzIGEgc3R1bWJsaW5nIGJsb2NrIGZvciBtZSANCndoaWxlIEkgd2FzIGxlYXJu aW5nIGhvdyB0byB1c2UgU0VMaW51eCBwcm9wZXJseS4NCg0KVGhlIHJlYXNvbiBmb3IgdGhpcyBh IGJpdCBvYnNjdXJlLCBhbmQgSSBkb24ndCByZWFsbHkgdW5kZXJzdGFuZCBpdDsgDQpwZXJoYXBz IHNvbWVvbmUgZWxzZSByZWFkaW5nIHRoaXMgbWlnaHQgYmUgYWJsZSB0byBmaWxsIG1lIGluPyBJ IA0KdW5kZXJzdGFuZCB0aGF0IGJhY2sgaW4gdGhlIGRheSwgc3lzdmluaXQgKHJ1bm5pbmcgYXMg aW5pdF90KSB3b3VsZCBuZWVkIA0KdG8gZW5zdXJlIHRoYXQgaXRzIGluaXQgc2NyaXB0cyB3ZXJl IHJ1biBhcyBpbml0cmNfdCwgaGVuY2UgdGhlIA0KdHJhbnNpdGlvbiBydWxlIHRyaWdnZXJlZCBi eSBleGVjdXRpbmcgYSBmaWxlIGxhYmxsZWQgc2hlbGxfZXhlY190IGFib3ZlLg0KDQpIb3dldmVy LCBpbml0IHNjcmlwdHMgYXJlIGxhYmVsbGVkIHdpdGggaW5pdHJjX2V4ZWNfdCwgYW5kIHRoaXMg cnVsZSBleGlzdHM6DQoNCiMgc2VzZWFyY2ggLVQgLXMgaW5pdF90IC10IGluaXRyY19leGVjX3Qg LWMgcHJvY2Vzcw0KdHlwZV90cmFuc2l0aW9uIGluaXRfdCBpbml0cmNfZXhlY190OnByb2Nlc3Mg aW5pdHJjX3Q7DQoNCi4uLiBzbyB3aHkgaXMgdGhpcyBydWxlIG5vdCBzdWZmaWNpZW50PyBXaGF0 J3MgdGhlIG5lZWQgZm9yIHRoZSBydWxlIA0KdGhhdCB0cmFuc2l0aW9ucyB0byBpbml0cmNfdCB3 aGVuIGEgZmlsZSBsYWJlbGxlZCB3aXRoIHNoZWxsX2V4ZWNfdCBpcyANCmV4ZWN1dGVkPyBTb21l dGhpbmcgSSd2ZSBhbHdheXMgd29uZGVyZWQgYnV0IG5ldmVyIGFza2VkIGFib3V0IGJlZm9yZS4g OikNCg0KLS0gDQpTYW0gTW9ycmlzIDxodHRwczovL3JvYm90cy5vcmcudWsvPg0KUEdQOiByc2E0 MDk2L0NBQUEgQUExQSBDQTY5IEE4M0EgODkyQiAgMTg1NSBEMjBCIDQyMDIgNUNEQSAyN0I5DQot LSAKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc2VsaW51 eCBtYWlsaW5nIGxpc3QgLS0gc2VsaW51eEBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpUbyB1bnN1 YnNjcmliZSBzZW5kIGFuIGVtYWlsIHRvIHNlbGludXgtbGVhdmVAbGlzdHMuZmVkb3JhcHJvamVj dC5vcmcKRmVkb3JhIENvZGUgb2YgQ29uZHVjdDogaHR0cHM6Ly9kb2NzLmZlZG9yYXByb2plY3Qu b3JnL2VuLVVTL3Byb2plY3QvY29kZS1vZi1jb25kdWN0LwpMaXN0IEd1aWRlbGluZXM6IGh0dHBz Oi8vZmVkb3JhcHJvamVjdC5vcmcvd2lraS9NYWlsaW5nX2xpc3RfZ3VpZGVsaW5lcwpMaXN0IEFy Y2hpdmVzOiBodHRwczovL2xpc3RzLmZlZG9yYXByb2plY3Qub3JnL2FyY2hpdmVzL2xpc3Qvc2Vs aW51eEBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpEbyBub3QgcmVwbHkgdG8gc3BhbSwgcmVwb3J0 IGl0OiBodHRwczovL3BhZ3VyZS5pby9mZWRvcmEtaW5mcmFzdHJ1Y3R1cmUvbmV3X2lzc3VlCg==