CGI on user directory

Yuichi Nakamura himainu-ynakam at miomio.jp
Mon May 9 16:11:59 UTC 2005


On FC4 test2 with targeted policy(selinux-policy-targeted-1.23.14-2),
I tried to run CGI on user home directory.

After checked it run on permissive mode, 
chcon like following.
chcon -R system_u:object_r:httpd_sys_script_exec_t ~/public_html/cgi-bin/

I found it does not work on enforcing mode.
After I add  "allow httpd_suexec_t user_home_t:dir { read };"
it worked. 
Please add it to apache.te

---
Yuichi Nakamura




More information about the selinux mailing list