php error log policy

Vadym Chepkov vchepkov at gmail.com
Fri Sep 23 11:52:06 UTC 2011


Hi,

php module has a capability to write errors to a log file.
Since unlike other apache logs this one is updated by a child I had to create a separate directory where apache user would have write access:

error_log = /var/log/php/php_error.log

in RHEL6 I can find an existing context suitable for this though. 
I can't use httpd_log_t, because php log is opened for "writing", not "appending" and if I use any other httpd "working" contexts, logrotate is not allowed to rotate this log.

Shall I open a bugzilla request or there is something I overlooked?

Thanks,
Vadym



More information about the selinux mailing list