<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
<font face="Helvetica, Arial, sans-serif">Hi.<br>
<br>
I'm trying to setup squid with SELinux, the problem i encounter is
taht i want to add another directory for cache, in this system we
have a home partition with huge space, i create a squid dir and
add the path with semanage:<br>
<br>
semanage fcontext -a -t squid_cache_t '/home/squid(/.*)?'<br>
<br>
i check the files and are in the good context:<br>
<br>
drwxr-xr-x squid squid user_u:object_r:squid_cache_t .<br>
drwxr-xr-x squid squid system_u:object_r:home_root_t ..<br>
drwxr-x--- squid squid user_u:object_r:squid_cache_t 00<br>
</font><font face="Helvetica, Arial, sans-serif">drwxr-x--- squid
squid user_u:object_r:squid_cache_t 01</font><br>
<font face="Helvetica, Arial, sans-serif">...<br>
<br>
But when i want start it i get this:<br>
<br>
type=AVC msg=audit(1296442326.932:739661): avc: denied { search
} for pid=30924 comm="squid" name="/" dev=sda3 ino=2
scontext=user_u:system_r:squid_t:s0
tcontext=system_u:object_r:home_root_t:s0 tclass=dir<br>
<br>
I know that the solution is to mount the huge partition on
/var/spool/squid, i'm a newbie to SELinux, and want to know if
it's posible to archive this.<br>
<br>
Regards.<br>
</font>
</body>
</html>