Re: default user context on fedorapeople.org

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2012-03-27 at 17:17 -0400, seth vidal wrote:
> And that is the more or less it - does anyone have any
> suggestions/thoughts? 

You don't have to limit yourself to picking between user_u or guest_u.
You can create another role, such as "fedorauser_u" that is basically
guest_u, except you can then add specific policies via SELinux roles,
such as:

irc_role(fedorauser_t, fedorauser_r)

Which should let them run an IRC client such as irsii.

On the other hand, just setting user_u is a good start and a lot less
work.

Best,
-- 
Konstantin Ryabitsev
Systems Administrator, Kernel.org
Montréal, Québec

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[Index of Archives]     [Fedora Development]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux