/etc/default in Fedora

Matej Cepl mcepl at redhat.com
Sat Mar 17 07:45:36 UTC 2012


On 16.3.2012 18:49, David Quigley wrote:
> Short of educating web server administrators about SELinux and the
> correct labels for web resources I'm not sure what else can be done. You
> don't want to use restorecond to make sure the directories are labeled
> properly because you could potentially use an improperly configured file
> upload capability to drop whatever pages you want onto the server and it
> would fixup the labels. Unfortunately education is the best option but
> not the easiest.

I don't care that much about web admins (although, following the saga of 
twit.tv being hacked again and again by scripts which could be most 
likely prevented by SELinux is a sad sight), but this is apache.org, for 
$DEITY sake! They should know more than your average web admin.

Matěj



More information about the devel mailing list