Re: [CentOS] Squid and SELinux

2011-02-02 Thread Marcos Lois Bermúdez
Thks, It's clear now for me, i have a lot of figths with SELinux, but i need to learn more, so i don't want deactivate it, allow squit to search home_root_t seems to be good, so i try to make the correct thinks and prepare a partition outside the home dir for squid. A lot of thks for your

Re: [CentOS] Squid and SELinux

2011-02-01 Thread Marcos Lois Bermúdez
Hi Tsuyoshi, The /home/squid dir have the user_u:object_r:squid_cache_t The /home dir have the system_u:object_r:home_root_t This seems that only can be achieved via audit2allow? A lot of thks for your fast reply. Regards. El 01/02/11 02:29, Tsuyoshi Nagata escribió: Hi Mrcos (2011/02/01

Re: [CentOS] Squid and SELinux

2011-02-01 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/31/2011 08:29 PM, Tsuyoshi Nagata wrote: Hi Mrcos (2011/02/01 0:31), Marcos Lois Bermúdez wrote: semanage fcontext -a -t squid_cache_t '/home/squid(/.*)?' i check the files and are in the good context: drwxr-xr-x squid squid

[CentOS] Squid and SELinux

2011-01-31 Thread Marcos Lois Bermúdez
Hi. I'm trying to setup squid with SELinux, the problem i encounter is taht i want to add another directory for cache, in this system we have a home partition with huge space, i create a squid dir and add the path with semanage: semanage fcontext -a -t squid_cache_t '/home/squid(/.*)?' i

Re: [CentOS] Squid and SELinux

2011-01-31 Thread Tsuyoshi Nagata
Hi Mrcos (2011/02/01 0:31), Marcos Lois Bermúdez wrote: semanage fcontext -a -t squid_cache_t '/home/squid(/.*)?' i check the files and are in the good context: drwxr-xr-x squid squid user_u:object_r:squid_cache_t. ** drwxr-xr-x squid squid system_u:object_r:home_root_t .. drwxr-x---