Jason L Tibbitts III wrote:
I'm trying to understand why, on an updated F8 machine with
doesn't end up as httpd_sys_script_exec_t.
semanage fcontext -l says (among many other lines, of course):
/var/www/[^/]*/cgi-bin(/.*)? all files system_u
> sudo restorecon -R -v /var/www
> ls -lZ /var/www/blah
drwxr-xr-x root root unconfined_u
Am I misinterpreting the semanage output above? Is it possible that
the following line, which appears earlier in the semanage output, is overriding?
/var/www(/.*)? all files system_u
httpd_sys_content_t is a customizable type and will be left alone by
restorecon unless you use -F. This may change before much longer though,
given that it's easier to manage file contexts using semanage than it
was when customizable types were introduced.
fedora-selinux-list mailing list