selinux, unlabeled files, apache, etc.

From: Walter Petrel (petrel_at_graffiti.net)
Date: 08/27/05

  • Next message: M. Lewis: "Re: selinux, unlabeled files, apache, etc."
    To: fedora-list@redhat.com
    Date: Fri, 26 Aug 2005 22:43:00 -0500
    
    

    After upgrading from RH9 to FC4 (and opting for selinux), I followed the Fedora instructions on enabling user directories again, setting up the se context and all that, but no good -- I still get the 403's.

    I have a hunch it is due to the way I upgraded the system. Maybe some will say it's laziness, but I left /home as it was before (i.e. unformatted). As a result, I see that /home/xyz has no selinux label. Will that screw up apache? (The selinux faq for FC3 talks about potential trouble if you turn off selinux, create new files and then turn it back on.)

    Is there a way to label all the unabled files? Then I could give all files in home the user_home_t label, and then relabel the userdir for httpd. chcon won't work on /home/xyz because it tells me the file is unlabeled.

    Is there some other obvious trouble I might be in because I didn't let the installer write over /home?

    tia

    -- 
    _______________________________________________
    Graffiti.net free e-mail @ www.graffiti.net
    Check out our value-added Premium features, such as a 1 GB mailbox for just US$9.95 per year!
    Powered By Outblaze
    -- 
    fedora-list mailing list
    fedora-list@redhat.com
    To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
    

  • Next message: M. Lewis: "Re: selinux, unlabeled files, apache, etc."

    Relevant Pages

    • Re: selinux, unlabeled files, apache, etc.
      ... > Is there some other obvious trouble I might be in because I didn't let the installer write over /home? ... I think 'Walter Petrel wrote: ...
      (Fedora)
    • Re: Newbie first-time install advice: Highpoint Rocket 133SB
      ... There I found explanations about how this modem works, ... > trying to figure out why all of the lights were good but the installer ... > commands to run and what configuration files to edit if I have trouble. ... You should be able to boot from it, ...
      (Debian-User)
    • Re: First attempt to use preseeding
      ... on the kernel command line to the installer. ... Based on over 50 years of trouble shooting experience ... trying to _document_ that a bug exists. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". ...
      (Debian-User)
    • Re: REPOST : problem with security ? on IIS5-Soap-ISAPI-Win2Kpr
      ... I added extensive logging of errors to the DLL and found out ... "Visual Studio Installer 1.1" package which ... any trouble in those cases. ...
      (microsoft.public.inetserver.iis.security)
    • Re: REPOST : problem with security ? on IIS5-Soap-ISAPI-Win2Kpr
      ... I added extensive logging of errors to the DLL and found out ... "Visual Studio Installer 1.1" package which ... any trouble in those cases. ...
      (microsoft.public.win2000.security)