Re: SELinux Permission for download a file.

[Jason Long]

Thank you so much for your help.
The result are:

# ausearch -m avc --start recent
<no matches>

And:

https://pastebin.fun/AZw2Vmd06K

By default, SELinux must not allow downloading files in the root of web server? 

Excuse me, is SELinux label for WordPress OK?

drwxrwxr-x. 7 apache apache system_u:object_r:httpd_sys_rw_content_t:s0    4096 Oct 17
19:37 wordpress





On Tuesday, October 13, 2020, 09:48:35 AM GMT+3:30, Ashish Mishra
<ashishm(a)mvista.com&gt; wrote: 





Hi Jason , 

As a generic debugging , I would have followed the below aspects .
You can look at them if they can help you :

1) Quick test with changing to permissive and check if the problem 
   is via SELINUX rules or your DAC's have some issue here 

2) Can ausearch give any pointers 
   #ausearch -m avc --start recent

3) Can enabling any boolean help 
    $ getsebool -a      // To see all the booleans 

4) Last will be to check if audit2allow can help 

Thanks ,
Ashish Kumar Mishra 
_______________________________________________
selinux mailing list -- selinux(a)lists.fedoraproject.org
To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]...