freeipa/selinux/ipa_httpd/ipa_httpd.fc

#
# /var
#
/var/cache/ipa/sessions(/.*)?  gen_context(system_u:object_r:httpd_sys_content_t,s0)

# Make these files writable so the selfsign plugin can operate
/etc/httpd/alias/cert8.db       --      gen_context(system_u:object_r:cert_t,s0)
/etc/httpd/alias/key3.db        --      gen_context(system_u:object_r:cert_t,s0)
/var/lib/ipa/ca_serialno        --      gen_context(system_u:object_r:cert_t,s0)
Add SELinux policy for UI assets This also removes the Index option of /ipa-assets as well as the deprecated IPADebug option. No need to build or install ipa_webgui anymore. Leaving in the code for reference purposes for now. 2009-11-03 14:26:00 -06:00			`#`
			`# /var`
			`#`
			`/var/cache/ipa/sessions(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0)`
Set the context of files needed by the selfsign CA so Apache can write them 2009-12-16 15:04:06 -06:00
			`# Make these files writable so the selfsign plugin can operate`
			`/etc/httpd/alias/cert8.db -- gen_context(system_u:object_r:cert_t,s0)`
			`/etc/httpd/alias/key3.db -- gen_context(system_u:object_r:cert_t,s0)`
			`/var/lib/ipa/ca_serialno -- gen_context(system_u:object_r:cert_t,s0)`