Re: [CentOS] SELinux policy vs. static web content

2019-01-30 Thread Gordon Messmer
On 1/30/19 7:57 AM, Nicolas Kovacs wrote: The tl;dr version of my last post is : Apache is not supposed to show static web pages with a user_tmp_t SELinux context. So why does it show them anyway ? Policy allows that, currently: # sesearch -A -s httpd_t -t user_tmp_t Found 15 semantic av rule

Re: [CentOS] SELinux policy vs. static web content

2019-01-30 Thread Nicolas Kovacs
Le 30/01/2019 à 16:22, Nicolas Kovacs a écrit : > Some time ago I wrote an introductory article about SELinux on my blog. > I'm currently updating it for my new blog, and I found a curious change > in SELinux policy. Here goes. > > For demonstration purposes, I'm using some static webpages, more e

[CentOS] SELinux policy vs. static web content

2019-01-30 Thread Nicolas Kovacs
Hi, Some time ago I wrote an introductory article about SELinux on my blog. I'm currently updating it for my new blog, and I found a curious change in SELinux policy. Here goes. For demonstration purposes, I'm using some static webpages, more exactly the default pages found in /usr/share/httpd/no