| |||||||||||||
Change is good when it brings worthy improvements, like securityChange is good when it brings worthy improvements, like securityPosted Jul 15, 2008 22:15 UTC (Tue) by dpquigl (subscriber, #52852)In reply to: Change is good when it brings worthy improvements, like security by dpquigl Parent article: SELinux and Fedora
I also found on Dan Walsh's blog that there is a GUI for doing this as well. "You can see similar functionality in system-config-selinux by selecting the 'File Labeling' list item and then clicking on the 'Customized' button."
(Log in to post comments)
Change is good when it brings worthy improvements, like security Posted Jul 17, 2008 3:45 UTC (Thu) by mrshiny (subscriber, #4266) [Link] Thanks for the tip. I had already gone down this road with the gui tool and found that something didn't work properly and my attempts at manually setting this stuff failed. I eventually gave up and moved my doc root or just manually changed the context... I forget. I think I manually changed the context and I expect it to fail if the whole system gets re-labelled. It would be much easier for a sysadmin to be able to specify the document root in the apache config file and have an selinux-aware tool say "gee, looks like you'll need to add these se-linux rules... proceed? Y/N". But at least much progress has been made with these tools compared to Fedora 2.
|
|||||||||||||