openstack/keystone
Code Issues Proposed changes

Merge "Update access control configuration in httpd config"

Browse Source
This commit is contained in:
Jenkins 2015-06-03 23:55:37 +00:00 committed by Gerrit Code Review
commit 58e447ab8a
1 changed files with 5 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
doc/source/apache-httpd.rst
View File

@ -51,18 +51,12 @@ Keystone's primary configuration file (``etc/keystone.conf``) and the
PasteDeploy configuration file (``etc/keystone-paste.ini``) must be readable to
HTTPD in one of the default locations described in :doc:`configuration`.
SELinux
-------
Access Control
--------------
If you are running with SELinux enabled (and you should be) make sure that the
file has the appropriate SELinux context to access the linked file. If you
have the file in /var/www/cgi-bin, you can do this by running:
.. code-block:: bash
$ sudo restorecon /var/www/cgi-bin
Putting it somewhere else requires you set up your SELinux policy accordingly.
If you are running with Linux kernel security module enabled (for example
SELinux or AppArmor) make sure that the file has the appropriate context to
access the linked file.
Keystone Configuration
----------------------