I understand that the files are mislabeled and am hoping for another solution too. I can create that type, but am more concerned with this being the default label assigned to that directory and all of its contents. Should this be considered a bug in the latest policy? An update to my policy and a filesystem relabel is what's set the context to lib_t in the first place.
I'll try the label httpd_sys_script_exec_t and report my results.
On Mon, Aug 4, 2014 at 9:43 AM, Dominick Grift dominick.grift@gmail.com wrote:
On Mon, 2014-08-04 at 08:52 -0500, Jeremy Young wrote:
Hi Dominick,
Thank you for the quick answer! I noticed that too about the files in /usr/lib/mailman/cgi-bin being apparently mislabeled, but I don't have that label available to me.
Then you could try httpd_sys_script_exec_t instead or preferably create your own mailman-cgi-exec type
Your solution sets a non-optimal precedence. You are changing the meaning of the lib_t type.