/etc/default in Fedora

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/17/2012 03:45 AM, Matej Cepl wrote:
> On 16.3.2012 18:49, David Quigley wrote:
>> Short of educating web server administrators about SELinux and
>> the correct labels for web resources I'm not sure what else can
>> be done. You don't want to use restorecond to make sure the
>> directories are labeled properly because you could potentially
>> use an improperly configured file upload capability to drop
>> whatever pages you want onto the server and it would fixup the
>> labels. Unfortunately education is the best option but not the
>> easiest.
> 
> I don't care that much about web admins (although, following the
> saga of twit.tv being hacked again and again by scripts which could
> be most likely prevented by SELinux is a sad sight), but this is
> apache.org, for $DEITY sake! They should know more than your
> average web admin.
> 
> Matěj
> 


Here is the current httpd man page.

http://people.fedoraproject.org/~dwalsh/SELinux/httpd_selinux.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9kVswACgkQrlYvE4MpobMO9wCgwCR8+Xml+TVOYp7IKDXEgCW6
LmMAn3T9Ble+AVUBhFnkyrDqcLV7JYPs
=Gjzi
-----END PGP SIGNATURE-----