Re: Using dyntransition to reduce privileges for Web application

[Scott Gifford <sgifford@xxxxxxxxxxxxxxxx>]

On Wed, Feb 23, 2011 at 12:38 AM, Scott Gifford <sgifford@xxxxxxxxxxxxxxxx> wrote:

On Tue, Feb 22, 2011 at 9:00 AM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:

On 02/21/2011 10:19 PM, Scott Gifford wrote:

[ ... ] 

> Yeah, true, but I'm not sure how to cause them to have no category
> either, apart from using setxattr.
>

I think if you do the file context correctly you can run restorecon -F
to fix the label.  If your CGI were in Code or python, you could use
setfscreatecon, to set the label automatically.

My code is in Perl,

Also, are these the python bindings you're talking about above?

http://sourceforge.net/projects/python-selinux/

Those functions would be pretty easy for me to port to perl, if this would be useful to anybody else.

-----Scott.

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux