Specifying The Security Context Of Entire File Systems - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

Chapter 45. Working With SELinux
Figure 45.2. Using the Security Level Configuration dialog box to load a custom policy.

45.2.9. Specifying the Security Context of Entire File Systems

You can use the mount -o context= command to set a single context for an entire file system.
This might be a file system that is already mounted and that supports xattrs, or a network file system
that obtains a genfs label such as cifs_t or nfs_t.
For example, if you need the Apache HTTP Server to read from a mounted directory or loopback file
system, you need to set the type to httpd_sys_content_t:
mount -t nfs -o context=system_u:object_r:httpd_sys_content_t \
server1.example.com:/shared/scripts /var/www/cgi
Tip
When troubleshooting httpd and SELinux problems, reduce the complexity of your
situation. For example, if you have the file system mounted at /mnt and then symbolically
766