From Debian package 0.2.20100524-11 0013-Add-debian-apache-paths-and-apache_script_exec_domai.patch (part of) * Allow user_t to manage httpd_user_content_t, also allow httpd_t the same access to httpd_user_content_t sym-links as to files. Mostly merged upstream in 83e07b8a (2011-02-13), but the second hunk is duplicated in 0.2.20110726-1. Index: policy/modules/contrib/apache.if =================================================================== --- policy/modules/contrib/apache.if.orig +++ policy/modules/contrib/apache.if @@ -69,6 +69,7 @@ files_type(httpd_$1_ra_content_t) read_files_pattern(httpd_t, httpd_$1_content_t, httpd_$1_htaccess_t) + read_lnk_files_pattern(httpd_t, httpd_$1_content_t, httpd_$1_htaccess_t) domtrans_pattern(httpd_suexec_t, httpd_$1_script_exec_t, httpd_$1_script_t) @@ -245,6 +246,13 @@ manage_dirs_pattern($2, httpd_user_content_t, httpd_user_content_t) manage_files_pattern($2, httpd_user_content_t, httpd_user_content_t) + manage_lnk_files_pattern($2, httpd_user_content_t, httpd_user_content_t) + relabel_dirs_pattern($2, httpd_user_content_t, httpd_user_content_t) + relabel_files_pattern($2, httpd_user_content_t, httpd_user_content_t) + relabel_lnk_files_pattern($2, httpd_user_content_t, httpd_user_content_t) + + manage_dirs_pattern($2, httpd_user_content_t, httpd_user_content_t) + manage_files_pattern($2, httpd_user_content_t, httpd_user_content_t) manage_lnk_files_pattern($2, httpd_user_content_t, httpd_user_content_t) relabel_dirs_pattern($2, httpd_user_content_t, httpd_user_content_t) relabel_files_pattern($2, httpd_user_content_t, httpd_user_content_t)