Hey guys,
I want to install wordpress cms and wondering what way will be better. Should i use httpd_sys_content_t for /var/www/domain/public_html or install cms to the /home/user with user_t domain. What will be better solution of security ?
Thanks,
[SELinux] http_sys_content vs user_t policy for web cms
Re: [SELinux] http_sys_content vs user_t policy for web cms
You should install it under the directory /var/www/html
When you extract a tar archive in or copy the files to this directory, they will receive automatically the proper selinux context.
Note that you should not move the files to the /var/www/html directory, since the selinux context will be retained when you move a file and you may end up with the wrong selinux context.
Files should be owned by the user apache and have apache as the group.
When you extract a tar archive in or copy the files to this directory, they will receive automatically the proper selinux context.
Note that you should not move the files to the /var/www/html directory, since the selinux context will be retained when you move a file and you may end up with the wrong selinux context.
Files should be owned by the user apache and have apache as the group.
Re: [SELinux] http_sys_content vs user_t policy for web cms
Wordpress is also packaged in EPEL and is currently 4.9.6 which is the current version so it appears to get patched in a timely manner.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke