From 28403cd6aac6e6245ea7d189e34219b0af879603 Mon Sep 17 00:00:00 2001 From: Henry Date: Thu, 26 Apr 2018 08:32:07 +0200 Subject: SeLinux context Prefer apply rights to the whole data instead of individual subdir --- docs/en/users/07_Frequently_Asked_Questions.md | 24 ++---------------------- 1 file changed, 2 insertions(+), 22 deletions(-) (limited to 'docs/en/users') diff --git a/docs/en/users/07_Frequently_Asked_Questions.md b/docs/en/users/07_Frequently_Asked_Questions.md index 8187b8b6a..42156b1a9 100644 --- a/docs/en/users/07_Frequently_Asked_Questions.md +++ b/docs/en/users/07_Frequently_Asked_Questions.md @@ -47,28 +47,8 @@ For more information on that matter, there is a [dedicated documentation](../../ ## Permissions under SELinux -Some Linux distribution like Fedora or RedHat Enterprise Linux have SELinux system enabled. This acts like a firewall application, so all applications cannot write/modify files under certain conditions. While installing FreshRSS, step 2 can fail if the httpd process cannot write to the following directories : - - - FreshRSS/data - - FreshRSS/data/cache - - FreshRSS/data/favicons - - FreshRSS/data/users - -The following commands should be executed as root : - -```sh -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/cache' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/users' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/favicons' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/PubSubHubbub' - -restorecon -Rv /usr/share/FreshRSS/data -``` - -If for some reasons right should be granted to the whole data directory (itself and sub-directories), execute the following commands: - +Some Linux distribution like Fedora or RedHat Enterprise Linux have SELinux system enabled. This acts like a firewall application, so all applications cannot write/modify files under certain conditions. While installing FreshRSS, step 2 can fail if the httpd process cannot write to some data sub-directories, the following command should be executed as root : ```sh semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data(/.*)?' restorecon -Rv /usr/share/FreshRSS/data -``` \ No newline at end of file +``` -- cgit v1.2.3