[CentOS] C7 apache file access

Thu Dec 24 06:19:43 UTC 2015
Robert Moskowitz <rgm at htt-consult.com>


On 12/24/2015 01:08 AM, Gordon Messmer wrote:
> On 12/23/2015 11:15 AM, Robert Moskowitz wrote:
>> Wiaht is this httpd_user_content_t?
>
> That is an selinux context which httpd is allowed to access.  It is 
> defined as the label for files matching the regex 
> /home/[^/]*/((www)|(web)|(public_html))(/.+)? in 
> /etc/selinux/targeted/contexts/files/
>
> "restorecon" can be used to reset contexts to those defined in that 
> directory.
>
>> Why on files I create on this system and not those I cp from a USB 
>> drive?
>
> Because you used cp -a, which preserves permissions and labels, among 
> other attributes.  Normally, files inherit a context from their parent 
> directory.

Ah yes.  I was lazy, as 'all' I really wanted was to maintain timestamps 
on those files.  Serves me right...

thanks for the explaination.

New server is more solid than current, so I am going to launch it 
tomorrow.  Then on to BIND testing.