Hide Forgot
Description of problem: The Fedora version of targeted policy includes the following file contexts: /etc/selinux/targeted/contexts/files/file_contexts:/etc/drupal(/.*)? system_u:object_r:httpd_sys_rw_content_t:s0 /etc/selinux/targeted/contexts/files/file_contexts:/var/lib/drupal(/.*)? system_u:object_r:httpd_sys_rw_content_t:s0 /etc/selinux/targeted/contexts/files/file_contexts:/usr/share/drupal(/.*)? system_u:object_r:httpd_sys_content_t:s0 The RHEL version, selinux-policy-targeted.noarch 0:3.7.19-54.el6_0.5, includes the following: /etc/drupal(/.*)? system_u:object_r:httpd_sys_rw_content_t:s0 /var/lib/drupal(/.*)? system_u:object_r:httpd_sys_rw_content_t:s0 /usr/share/drupal(/.*)? system_u:object_r:httpd_sys_content_t:s0 Not sure if this is something we should address in a policy module in the new Drupal packages? I can work with Jon, the maintainer, if so. Chances are we'll run into the same thing in the upcoming Drupal 7 series.
Since RHEL 6.1 External Beta has begun, and this bug remains unresolved, it has been rejected as it is not proposed as exception or blocker. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux.
Paul, I am old and blind, but they look the same to me.
I think you meant you wanted -/etc/drupal(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0) +/etc/drupal(6)?(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0) -/usr/share/drupal(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) +/usr/share/drupal(6)?(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) -/var/lib/drupal(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0) +/var/lib/drupal(6)?(/.*)? gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
Yes -- in other words, need the 6 to capture the "drupal6" directories. FYI there is a drupal7 package on the way which will use "drupal7" to allow parallel installation of the web app core and modules.
Sorry, I had inadvertently pasted from the wrong sources. Looks like youth isn't all it's cracked up to be. ;-)
Lets just add /etc/drupal.* gen_context(system_u:object_r:httpd_sys_rw_content_t,s0) /usr/share/drupal.* gen_context(system_u:object_r:httpd_sys_content_t,s0) /var/lib/drupal.* gen_context(system_u:object_r:httpd_sys_rw_content_t,s0)
Fixed in selinux-policy-3.7.19-98.el6
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2011-1511.html