Настройка SELinux для некоторых приложений

1setsebool -P httpd_unified 1
2setsebool -P httpd_can_network_connect_db 1
3setsebool -P httpd_can_network_connect 1
4setsebool -P httpd_can_network_relay 1
5setsebool -P httpd_can_sendmail 1
6setsebool -P httpd_execmem 1
7setsebool -P httpd_use_fusefs 1

1setsebool -P selinuxuser_postgresql_connect_enabled 1

1setsebool -P selinuxuser_mysql_connect_enabled 1

1semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/ojs/cache(/.*)?"
2semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/ojs/public(/.*)?"
3semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/ojs/config.inc.php"
4semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/ojs/plugins/generic(/.*)?"
5
6semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/data(/.*)?"

1semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/sites/drupal/(.*)/sites/(.*)/files(/.*)?"
2semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/sites/drupal/(.*)/cache(/.*)?"
3semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/html/sites/drupal/(.*)/sites/all(/.*)?"

1semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/moodle/web-git/mod(/.*)?"
2semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/moodle/web-git/local(/.*)?"
3semanage fcontext --add -t httpd_sys_rw_content_t "/var/www/moodle/web-git/theme(/.*)?"

1semanage fcontext -a -t cert_t '/etc/letsencrypt/(archive|live)(/.*)?'