The attached patch fixes the apache policy so that apache 2 works fine in enforcing mode.

However, I am very unhappy with the read/write permissions on the sysadm terminals. Here are some ideas I had to fix that, and I'd like to hear comments on them:

1. try to fix the problem in the apache source.
2. write a wrapper that relabels the current (active) pts/tty and allow permission to that label only
3. write a wrapper that fuddles with the terminals.

-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



text/plain attachment: apache2.diff