GNOME Bugzilla – Bug 744873
image generation broken
Last modified: 2015-03-05 20:21:37 UTC
I think that we need to split the "temporary work" like qcow2 disks accessed via libguestfs into a distinct directory from "public static files". That way we can have everything in "public static files" be httpd_user_content_t.
This is what I have in terms of AVCs after yesterday's reboot: #============= httpd_t ============== #!!!! This avc can be allowed using the boolean 'httpd_use_fusefs' allow httpd_t fusefs_t:dir getattr; allow httpd_t var_t:file getattr; allow httpd_t virt_home_t:sock_file getattr;
Hopefully https://git.gnome.org/browse/gnome-continuous/commit/?id=00c524ada7890bad0b48f7f4b0ca97450458502b will help with this.
This works now.