Re: Serving data from a DVD via httpd

["Mikkel L. Ellertson" <mikkel@xxxxxxxxxxxxxxxx>]

Uno Engborg wrote:
> I'm trying to mount a DVD inside /var/www/html and serve it using httpd.
> The problem is that the DVD have the wrong SELinux context
>
> I try to do somethng like this:
>
> mount  -o context=system_u:object_r:httpd_sys_content_t,ro /dev/cdrom 
> /var/www/html/mymountpoint
>
> but that doen't change the context on the mouned dvd, and consequently, 
> apache fails to serve it.
> If I run audit2allow it tells me to:
> allow httpd_t iso9660_t:dir getattr;
>
> I supose I could make such a module, but I rather not as there might be 
> more dvds mounted elsewhere
> in the system that should remain protected from apache.
>
> Ideas anyone?
>
> Regards
> Uno Engborg
The context is wrong - try replacing it with:

context=system_u:object_r:httpd_sys_content_t:s0

The :s0 is important.

Mikkel
--

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list