In attempting to add my virtual hosts like I’ve done for 15.x, I find it doesn’t work the same. I’ve narrowed it down to issues with SELinux. It looks like SELinux is only allowing access if the user and/or group is root as in /srv/www/htdocs. That is on my install partition, but I wish to use my data partition that I keep the same from install to install. I’ve tried to create symbolic links to the /srv/www/htdocs, and adding +FollowSymLinks, but it appears all files must be owned by root. I change owner of one, and then it’s the next one.
pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/srv/www/htdocs/chaduath/' is executable
I installed cockpit and cockpit client launcher, and then turned off SELinux Policy enforcing, it works as expected.
So without much knowledge of this SELinux stuff, I would like to know how to add my data develop directory to whatever it is needed for the apache server to access it.
Even after reading that, I’m still unsure. Looks like the key is, httpd_sys_content_t. This isn’t just an openSUSE thing, right? And other distributions may be using this SELinux stuff?
With being new to the concept, it’s coming across to me, with this and several other things, that several steps backwards have been taken. Going to more of a command-line system.
It is more cryptic, more hidden, security, that’s hard to see. I did manage to find a command of “matchpathcon”. and “ls -alZ” with the new -Z parameter that’s not documented on my local system.
Are there any graphical programs that can give you an overview of what the current system is and allow easy changing?
I had a similar issue, because I keep my virtual images not in the default folder and selinux was complaining about it.
I had to run (/virtual/virtual is the folder there I keep the images) :
semanage fcontext -a -t svirt_image_t "/virtual/virtual(/.*)?"
restorecon -vR /virtual/virtual
If you want something with gui, you need to install policycoreutils-gui. It is very helpfull.
Make sure you have selinux-autorelabel installed, in my case it wasn’t and I run into some issues.