From Debian package 0.2.20100524-11 * Allow user_t to manage httpd_user_content_t, also allow httpd_t the same access to httpd_user_content_t sym-links as to files. Mostly merged upstream in 83e07b8a (2011-02-13). Index: policy/modules/services/apache.if =================================================================== --- policy/modules/services/apache.if.orig +++ policy/modules/services/apache.if @@ -69,6 +69,7 @@ files_type(httpd_$1_ra_content_t) read_files_pattern(httpd_t, httpd_$1_content_t, httpd_$1_htaccess_t) + read_lnk_files_pattern(httpd_t, httpd_$1_content_t, httpd_$1_htaccess_t) domtrans_pattern(httpd_suexec_t, httpd_$1_script_exec_t, httpd_$1_script_t)