[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Using dyntransition to reduce privileges for Web application



On Wed, Feb 23, 2011 at 12:38 AM, Scott Gifford <sgifford@xxxxxxxxxxxxxxxx> wrote:
On Tue, Feb 22, 2011 at 9:00 AM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:
On 02/21/2011 10:19 PM, Scott Gifford wrote:
[ ... ] 
> Yeah, true, but I'm not sure how to cause them to have no category
> either, apart from using setxattr.
>
I think if you do the file context correctly you can run restorecon -F
to fix the label.  If your CGI were in Code or python, you could use
setfscreatecon, to set the label automatically.

My code is in Perl,

Also, are these the python bindings you're talking about above?

http://sourceforge.net/projects/python-selinux/

Those functions would be pretty easy for me to port to perl, if this would be useful to anybody else.

-----Scott.

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux

[Fedora Users]     [Fedora Legacy]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite Photos]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

Powered by Linux

Google
  Web www.spinics.net