On Fri, 2013-02-08 at 12:25 +0000, Clive Hills wrote:
Thanks both. The application is a RDBMS and it actually wants to
store it's
code in that dir and subdirectories thereof.
I think the actual datavolumes/files can be elsewhere. I'm guessing this
might have to be done in permissive mode.
No this is just about the content that was created by useradd command on
behalf of your app
Actually getting their code to work has been a big enough headache in
the
past but for historical reasons I do like to
maintain contact with their current stuff.
It tells us something about the developers and about their respect (lack
thereof) for Linux standards, the fact that they install this content
in /usr instead of a proper place
But then again, SELinux could -- in this scenario -- also be optimized.
Clive
selinux mailing list