On Sat, 2005-03-12 at 18:46 -0600, Christofer C. Bell wrote:
I have a question about how context inheritance works in SELinux.
The correct file context is already defined in
/etc/selinux/targeted/contexts/files/file_contexts as:
Ah, sorry, so you are running targeted policy. With all your discussion
of users I had assumed it was strict.
One thing that might explain a lot then is that httpd_sys_content_t and
httpd_user_content_t are exactly the same thing in the targeted policy:
domains/program/apache.te:
ifdef(`targeted_policy', `
typealias httpd_sys_content_t alias httpd_user_content_t;
typealias httpd_sys_script_exec_t alias httpd_user_script_exec_t;