fedora-selinux February 2008 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: Re: CVS Servers

Re: CVS Servers

From: Paul Howarth <paul_at_nospam>
Date: Thu Feb 14 2008 - 11:37:22 GMT
To: dant@cdkkt.com


Daniel B. Thurman wrote:
> In one of the Fedora CVS server setup, it says that if the
> administrator wants to use a simple pserver remote string
> such as:
>
> export CVSROOT=':pserver:<username>@<systemname>:/cvs'
>
> Then one has to:
>
> 1) /etc/xinetd.d/cvs:
> server_args = -f --allow-root=/cvs pserver
> 2) ln -s /var/cvs /cvs
>
> But the problem here is that SELinux has no context for
> the symbolic link /cvs, therefore deny's access.
>
> I tried setting context for /cvs by:
> 1) chcon -t cvs_data_t
>
> No dice. Does not work.
>
> To see if I can cvs login bypassing Selinux, I tried:
> 1) setenforce 0
> 2) cvs login (successfully)
> 3) setenforce 1
>
> So, what can I do to get SElinux to authorize the /cvs symbolic link
> access to /var/cvs?

Maybe try a bind mount instead of a symlink?

Paul. -- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list