From: Ken Smith <kens@kensnet.org>
To: selinux@tycho.nsa.gov
Subject: Web Application access to files in /mnt/
Date: Fri, 10 Jan 2014 21:08:15 +0000 [thread overview]
Message-ID: <52D0613F.3030805@kensnet.org> (raw)
Hi All, I could do with some simple guidance. I have a web application,
written in Perl, that is part of MythTV. It can stream video from files
mounted in /mnt.
The report from SElinux is
Source Context system_u:system_r:httpd_sys_script_t:s0
Target Context system_u:object_r:file_t:s0
Target Objects /mnt/store0 [ dir ]
Source mythweb.pl
What would be the best approach. Should I relabel the files in /mnt or
create a module like this
# grep mythweb.pl /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Thanks in advance
Ken
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
next reply other threads:[~2014-01-10 21:08 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-01-10 21:08 Ken Smith [this message]
2014-01-10 21:44 ` Web Application access to files in /mnt/ Dominick Grift
2014-01-12 17:04 ` luis
2014-01-12 17:05 ` Luis Ressel
2014-01-13 15:12 ` Daniel J Walsh
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=52D0613F.3030805@kensnet.org \
--to=kens@kensnet.org \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.