On 16.3.2012 18:49, David Quigley wrote:
Short of educating web server administrators about SELinux and the
correct labels for web resources I'm not sure what else can be done. You
don't want to use restorecond to make sure the directories are labeled
properly because you could potentially use an improperly configured file
upload capability to drop whatever pages you want onto the server and it
would fixup the labels. Unfortunately education is the best option but
not the easiest.

I don't care that much about web admins (although, following the saga of twit.tv being hacked again and again by scripts which could be most likely prevented by SELinux is a sad sight), but this is apache.org, for $DEITY sake! They should know more than your average web admin.

Matěj

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Reply via email to