Thanks for the tip. I had already gone down this road with the gui tool and found that
something didn't work properly and my attempts at manually setting this stuff failed. I
eventually gave up and moved my doc root or just manually changed the context... I forget. I
think I manually changed the context and I expect it to fail if the whole system gets
re-labelled.
It would be much easier for a sysadmin to be able to specify the document root in the apache
config file and have an selinux-aware tool say "gee, looks like you'll need to add these
se-linux rules... proceed? Y/N". But at least much progress has been made with these tools
compared to Fedora 2.