You can use something like this to handle project directories. $PROJECT_DIR=/srv/myproject semanage fcontext -a -t httpd_sys_content_t "$PROJECT_DIR(/.*)?" if [ -d "$PROJECT_DIR" ]; then restorecon -R "$PROJECT_DIR" fiby bdwyertech - Nginx Mailing List - English
As a follow up, if you are using NginX as a proxy, you might need a few more things. Here is a preliminary template of a type enforcement I've created for NginX to alleviate these issues. You can use this Type Enforcement file to generate an SELinux module, package it up, and load it. module nginx 1.0; require { type httpd_t; type http_cache_port_t; type port_t; class process setrlby bdwyertech - Nginx Mailing List - English
![]() |
![]() |
![]() |
![]() |
![]() |