Il 2022-10-31 18:14 Petr Lautrbach ha scritto:
If you need to share files between 2 different generic domains, you need to add rules to allow the access. For example, for the domain myprocess_t and files in /var/www/html, which is labeled as httpd_sys_content_t, you would use a module like this:
# cat > myprocess_httpd.cil <<EOF (allow myprocess_t httpd_sys_content_t (dir ( getattr open search ))) (allow myprocess_t httpd_sys_content_t (file ( getattr ioctl lock open read ))) EOF
# semodule -i myprocess_httpd.cil
Hi Petr, thanks for confirming.
Regards.
selinux@lists.fedoraproject.org