chcon: can't apply partial context to unlabeled file

Question

I get the following when trying to allow httpd to write to application specific directories.

[xxx MISP]# chcon -t httpd_sys_rw_content_t /var/www/MISP/app/files
chcon: can't apply partial context to unlabeled file ‘/var/www/MISP/app/files’

-rw-r----- root apache ? empty drwxr-x--- root apache ? feed-metadata drwxr-x--- root apache ? misp-galaxy drwxr-x--- root apache ? misp-objects drwxr-x--- root apache ? scripts drwxr-x--- root apache ? taxonomies drwxr-x--- apache apache ? terms drwxr-x--- root apache ? warninglists — user286785, Apr 18 '18 at 14:10
Yes, but what are the selinux contexts associated with the listing (hence the -Z flag) — Raman Sailopal, Apr 18 '18 at 14:14
I used the Z flag, but it didn't pull back anything additional. — user286785, Apr 18 '18 at 14:35
Do you actually have selinux enabled and running on the system? — Raman Sailopal, Apr 18 '18 at 15:00
Ha! That's a good reason why the command wouldn't be working! Doh! Thanks :) — user286785, Apr 18 '18 at 15:19

score 1 · Answer 1 · edited Jun 21 '18 at 08:58

1

You need to add some rule with semanage for your app/files directory, and then apply with restorecon -Rv.

See detailed explanations in this article (especially section about using httpd_sys_rw_content_t): Configuring SELinux Policies for Apache Web Servers

edited Jun 21 '18 at 08:58

U880D

answered Jun 15 '18 at 16:45

tonioc

score 0 · Answer 2 · answered Jun 15 '18 at 07:24

According other threads here on Unix Stackexchange: "chcon: can't apply partial context to unlabeled file '/usr/sbin/xrdp'" or "chcon: can't apply partial context to unlabeled file while installing nagios with SELinux", it seems that it is necessary to label the files using semanage and if there is SELinux in enforcing mode.

2 Answers2