From 28403cd6aac6e6245ea7d189e34219b0af879603 Mon Sep 17 00:00:00 2001 From: Henry Date: Thu, 26 Apr 2018 08:32:07 +0200 Subject: SeLinux context Prefer apply rights to the whole data instead of individual subdir --- docs/en/users/07_Frequently_Asked_Questions.md | 24 ++---------------------- docs/fr/users/07_Frequently_Asked_Questions.md | 22 ++-------------------- 2 files changed, 4 insertions(+), 42 deletions(-) (limited to 'docs') diff --git a/docs/en/users/07_Frequently_Asked_Questions.md b/docs/en/users/07_Frequently_Asked_Questions.md index 8187b8b6a..42156b1a9 100644 --- a/docs/en/users/07_Frequently_Asked_Questions.md +++ b/docs/en/users/07_Frequently_Asked_Questions.md @@ -47,28 +47,8 @@ For more information on that matter, there is a [dedicated documentation](../../ ## Permissions under SELinux -Some Linux distribution like Fedora or RedHat Enterprise Linux have SELinux system enabled. This acts like a firewall application, so all applications cannot write/modify files under certain conditions. While installing FreshRSS, step 2 can fail if the httpd process cannot write to the following directories : - - - FreshRSS/data - - FreshRSS/data/cache - - FreshRSS/data/favicons - - FreshRSS/data/users - -The following commands should be executed as root : - -```sh -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/cache' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/users' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/favicons' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/PubSubHubbub' - -restorecon -Rv /usr/share/FreshRSS/data -``` - -If for some reasons right should be granted to the whole data directory (itself and sub-directories), execute the following commands: - +Some Linux distribution like Fedora or RedHat Enterprise Linux have SELinux system enabled. This acts like a firewall application, so all applications cannot write/modify files under certain conditions. While installing FreshRSS, step 2 can fail if the httpd process cannot write to some data sub-directories, the following command should be executed as root : ```sh semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data(/.*)?' restorecon -Rv /usr/share/FreshRSS/data -``` \ No newline at end of file +``` diff --git a/docs/fr/users/07_Frequently_Asked_Questions.md b/docs/fr/users/07_Frequently_Asked_Questions.md index b1906147a..2dc2cae97 100644 --- a/docs/fr/users/07_Frequently_Asked_Questions.md +++ b/docs/fr/users/07_Frequently_Asked_Questions.md @@ -47,26 +47,8 @@ Pour plus d'information à ce sujet, il existe la [documentation dédiée](../.. ## Gérer les permissions sous SELinux -Certaines distributions Linux comme Fedora ou RedHat Enterprise Linux (RHEL) activent par défaut le système SELinux. Celui-ci permet de gérer des permissions au niveau des processus. Lors de l'installation de FreshRSS, l'étape 2 procède à la vérification des droits sur certains répertoires: - - - FreshRSS/data - - FreshRSS/data/cache - - FreshRSS/data/favicons - - FreshRSS/data/users - -Il faut donc exécuter les commandes suivantes en tant que root : -```sh -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/cache' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/users' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/favicons' -semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data/PubSubHubbub' - -restorecon -Rv /usr/share/FreshRSS/data -``` - -Si les droits doivent s'appliquer à tous les sous-répertoires de data et data lui-même, exécuter les commandes suivantes: +Certaines distributions Linux comme Fedora ou RedHat Enterprise Linux (RHEL) activent par défaut le système SELinux. Celui-ci permet de gérer des permissions au niveau des processus. Lors de l'installation de FreshRSS, l'étape 2 procède à la vérification des droits sur certains répertoires, il faut donc exécuter la commande suivante en tant que root: ```sh semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/FreshRSS/data(/.*)?' restorecon -Rv /usr/share/FreshRSS/data -``` \ No newline at end of file +``` -- cgit v1.2.3