[Arm-dev] SOLVED - Re: Anyone running named on armv7 with selinux?

Sun Feb 5 08:08:04 UTC 2017
Gordan Bobic <gordan at redsleeve.org>

On Sun, Feb 5, 2017 at 4:49 AM, Robert Moskowitz <rgm at htt-consult.com>
wrote:

>
>
> On 02/03/2017 11:07 AM, Gordan Bobic wrote:
>
> Have you done:
> # setsebool -P httpd_enable_homedirs true
> ?
>
>
> Yes.  That is in my notes to do.
>
> You may also need to do the following on each user's http exposed folder:
> # chcon -R -t httpd_sys_content_t ~<username>/public_html
>
>
> No.  I did:
>
> restorecon -Rv /home
>

There is a fundamental difference between the two. You need to label the
httpd exported subtree specifically with the httpd_sys_content_t label.
What restorecon will do is restore the default label which is
user_home_dir_t.


>
> I am getting the same behavior with Fedora 25 Server image, so this is
> either something really wrong with SELinux on the Cubie, or something has
> changed....
>

I think that rules out a software problem.


>
> I just tried this and it now WORKS!!!!  Thanks Gordon.  This is NOT in
> anything I have read on userdir and Apache 2.4.
>


Glad I could help.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/arm-dev/attachments/20170205/f8b490d1/attachment-0006.html>