On Sun, 2023-08-27 at 19:30 +0200, François Patte wrote:
> For instance with selinux nextcloud help gives:
> <quote>
> semanage fcontext -a -t httpd_sys_rw_content_t 
> '/var/www/html/nextcloud/config(/.*)?'
> semanage fcontext -a -t httpd_sys_rw_content_t 
> '/var/www/html/nextcloud/apps(/.*)?'
> semanage fcontext -a -t httpd_sys_rw_content_t 
> '/var/www/html/nextcloud/data(/.*)?'
> semanage fcontext -a -t httpd_sys_rw_content_t 
> '/var/www/html/nextcloud/.user.ini'
> semanage fcontext -a -t httpd_sys_rw_content_t 
> '/var/www/html/nextcloud/3rdparty/aws/aws-sdk-php/src/data/logs(/.*)?'
> # restorecon -Rv '/var/www/html/nextcloud/'
> </quote>
> 
> These files or directories do not exist, apps and data excepted which 
> are located in /var/www/nextcloud.

Good.  You should only have web-serveable files inside /var/www/html,
if you had configuration files in there (like that "help" suggests),
someone could access them by connecting to your IP address.

And web-serveable files can be placed elsewhere, too, you just have to
configure the server for their location, and set the appropriate file
permissions and SELinux contexts.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.95.1.el7.x86_64 #1 SMP Mon Jul 24 13:59:37 UTC 2023 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to