]> git.ipfire.org Git - people/stevee/selinux-policy.git/commitdiff
logs directory under /var/www/html should be labeled content not as a httpd_log_t
authorDan Walsh <dwalsh@redhat.com>
Tue, 19 Jul 2011 14:53:49 +0000 (10:53 -0400)
committerDan Walsh <dwalsh@redhat.com>
Tue, 19 Jul 2011 14:53:49 +0000 (10:53 -0400)
policy/modules/services/apache.fc

index 70d68cb5243b7aa2fb92e7469dfc36b2643655cf..0145f7c3d288d8b38b5ad0cce86865d6fd7b92b9 100644 (file)
@@ -115,6 +115,7 @@ ifdef(`distro_debian', `
 
 /var/www(/.*)?                         gen_context(system_u:object_r:httpd_sys_content_t,s0)
 /var/www(/.*)?/logs(/.*)?              gen_context(system_u:object_r:httpd_log_t,s0)
+/var/www/html(/.*)?/logs(/.*)?         gen_context(system_u:object_r:httpd_sys_content_t,s0)
 /var/www/[^/]*/cgi-bin(/.*)?           gen_context(system_u:object_r:httpd_sys_script_exec_t,s0)
 /var/www/cgi-bin(/.*)?                 gen_context(system_u:object_r:httpd_sys_script_exec_t,s0)
 /var/www/icons(/.*)?                   gen_context(system_u:object_r:httpd_sys_content_t,s0)