total newbie audit2allow question

[Dominick Grift]

On Wed, 2013-04-17 at 10:01 +0200, Dominick Grift wrote:

> That is, of course if you label /rwg/mapserver/tmp appropriately (it
> should probably be tmp_t)
> 
> There is a command that allows one to make locations eqivalent to other
> locations in terms of selinux file contexts.
> 
> So to make /rwg/mapserver/tmp equivalent to /tmp:
> 
> semanage fcontext -a -e /tmp /rwg/mapserver/tmp
> restorecon -R -v -F /rwg/mapserver/tmp
> 
> (or atleast something along those lines)

Actually, i guess the whole mapserver directory is a asset of your
webapp? In that case you can just:

semanage fcontext -a -t httpd_mywebapp_content_rw_t
"/rwg/mapserver(/.*)?"
restorecon -R -v -F /rwg/mapserver