On Wed, 26 Sep 2007 21:17:39 -0400
Steve Grubb <sgrubb(a)redhat.com> wrote:
AFAIK, selinux only knows about a couple servers, like apache,
having
data in /srv. If SE Linux is going to protect the data, a standard
mapping between /srv and /var for everything should be worked out so
that policy can be adapted.
Therein lies the problem. /srv/ is open ground for sysadmins to use,
we can't prepopulate it with anything, and we can't assume what the
local admin will use for a scheme. /srv/<site>/{web,ftp,backup}
or /srv/{web,ftp,backup}/<site> or some other combo.
--
Jesse Keating
Fedora -- All my bits are free, are yours?