Sophie

Sophie

distrib > Fedora > 14 > x86_64 > by-pkgid > 199f3a151346a940aae1fb8822b3e5dc > files > 56

mrepo-0.8.7-2.fc14.noarch.rpm

Configuring mrepo for selinux
-----------------------------
The most simple way to make mrepo work on selinux is to map the mrepo
documentroot to the httpd context.

You can do this by doing:

	chcon -Rh --reference /var/www/html /var/www/mrepo


Another way is to create the file
/etc/selinux/targeted/src/policy/file_contexts/misc/local.fc,
with the following content:

	/var/mrepo(/.*)? system_u:object_r:httpd_sys_content_t

Afterwards recompile the policy by doing:

	make -C /etc/selinux/targeted/src load

And apply the context by doing:

	restorecon -R /var/mrepo

I'd like this to be done by default, either from the RPM package or by the
system itself. mrepo could be told to do this as well but I'm not sure if
this is the proper way to handle selinux.


Slightly more complicated selinux contribution
----------------------------------------------
David Hampton contributed a slightly more complicated selinux configuration
that defines its own mrepo objects and context, you can find those files in
the patches/ directory. SElinux improvements are welcome (as well as
information on how to standardize 

---
Please send me improvements to this document.