<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 04/13/2011 10:00 AM, Varuna Seneviratna wrote:
<blockquote
cite="mid:BANLkTiknb-wX9AHQWoP-uChQa-9Z52m_dA@mail.gmail.com"
type="cite">
<pre wrap="">I tried to set the ServerRoot to a Directory in my home Dirctory.But
when tried to start httpd after setting ServerRoot and saving the
httpd.conf file SELinux repoted the following
SELinux is preventing /usr/sbin/httpd from search access on the
directory /home/<Home Directory>.
***** Plugin catchall_boolean (47.5 confidence) suggests
*******************
If you want to allow httpd to read user content
Then you must tell SELinux about this by enabling the
'httpd_read_user_content' boolean.
Do
setsebool -P httpd_read_user_content 1
I want to know How to set setsebool to allow httpd to access only the
content of a particular user?
The manual pages of setsebool(8) and getsebool(8) can not be viewed,
when the command man getsebool(8) the output is "-bash: syntax error
near unexpected token `(' "
The SELinux FAQ at
<a class="moz-txt-link-freetext" href="http://docs.fedoraproject.org/en-US/Fedora/13/html/SELinux_FAQ/index.html#id3128699">http://docs.fedoraproject.org/en-US/Fedora/13/html/SELinux_FAQ/index.html#id3128699</a>
is as follows
Q:
How do I enable/disable SELinux protection on specific daemons
under the targeted policy?
A:
Use system-config-selinux, also known as the SELinux
Administration graphical tool, to control the Boolean values of
specific daemons. For example, if you need to disable SELinux for
Apache to run correctly in your environment, you can disable the value
in system-config-selinux. This change disables the transition to the
policy defined in apache.te, allowing httpd to remain under regular
Linux DAC security.
The getsebool and setsebool commands can also be used, including on
systems that do not have the system-config-selinux tool. Please refer
to the manual pages for these commands: getsebool(8) and setsebool(8)
for further details on their operation.
Varuna
</pre>
</blockquote>
<font size="+1"><font face="Console">As far as invoking man: drop
the (8)<br>
<br>
</font></font>
</body>
</html>