==========================
SELinux support in AWStats
==========================

AWStats is a CGI script, and needs to be labelled correctly to be called
from Apache if SELinux is enabled.

This should "just work" if you install the package "awstats-selinux".
If not, please report at https://bugzilla.redhat.com/

Below follows some detailed information for manual debugging etc.


Detailed information
--------------------

The files in ``/usr/share/awstats/wwwroot/cgi-bin`` need to have the 
``httpd_sys_script_exec_t`` type, and the databases files in 
``/var/lib/awstats`` need to have the ``httpd_sys_script_rw_t`` type.

You can change the type with the ``chcon`` command:

    chcon -R -t httpd_sys_script_exec_t /usr/share/awstats/wwwroot/cgi-bin
    chcon -R -t httpd_sys_script_rw_t /var/lib/awstats

But these modifications will be lost if the system is relabeled (you can
request a relabel with the system-config-security tool).

To make these changes permanent, this package sets the contexts by running
the following commands::

    semanage fcontext -a -t httpd_sys_script_exec_t \
        '/usr/share/awstats/wwwroot/cgi-bin(/.*)?'
    semanage fcontext -a -t httpd_sys_script_rw_t '/var/lib/awstats(/.*)?'