Fedora SELinux

• Thread Index

• SELinux and relocatable RPMs
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: Open vSwitch broken in Fedora 23?
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Open vSwitch broken in Fedora 23?
  • From: Ian Pilcher <arequipeno@xxxxxxxxx>
• Re: boolean value had been reset after system-upgrade
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: boolean value had been reset after system-upgrade
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: boolean value had been reset after system-upgrade
  • From: Bob Gustafson <bobgus@xxxxxxx>
• boolean value had been reset after system-upgrade
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: transition from init_rc
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: transition from init_rc
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Re: Using interfaces with role statements fails to compile when used inside a tunable_policy block
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: transition from init_rc
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• How to label rootfs at the build time?
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• RE: Semodule libsepol.permission_copy_callback permission not satisfied
  • From: RIJKEN Jeroen <jeroen.rijken@xxxxxxxxxxxxxxxxxx>
• Re: Semodule libsepol.permission_copy_callback permission not satisfied
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Semodule libsepol.permission_copy_callback permission not satisfied
  • From: RIJKEN Jeroen <jeroen.rijken@xxxxxxxxxxxxxxxxxx>
• Sharing directory with Vagrant box as guest VM
  • From: Tim Landscheidt <tim@xxxxxxxxxxxxxxxxxx>
• Re: invalid security context, lpr_t
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• invalid security context, lpr_t
  • From: "Dr. Michael J. Chudobiak" <mjc@xxxxxxxxxxxxxxx>
• Re: SELinux & disabled IPv6 (was: Re: Fedora IPv6 testing and improvements - request for ideas)
  • From: Moez Roy <moez.roy@xxxxxxxxx>
• Re: CVE-2015-5602 and SELinux
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: CVE-2015-5602 and SELinux
  • From: "Lakshmipathi.G" <lakshmipathi.g@xxxxxxxxx>
• CVE-2015-5602 and SELinux
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Is *anyone* reading this list who's a moderator?
  • From: Antonio Olivares <wingators@xxxxxxxxx>
• Re: Is *anyone* reading this list who's a moderator?
  • From: Manuel Wolfshant <wolfy@xxxxxxxxxxxxxxxxxx>
• Re: Is *anyone* reading this list who's a moderator?
  • From: Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx>
• Re: Is *anyone* reading this list who's a moderator?
  • From: m.roth@xxxxxxxxx
• Is *anyone* reading this list who's a moderator?
  • From: m.roth@xxxxxxxxx
• Re: ifdef policy blocks for different releases?
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: ifdef policy blocks for different releases?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• ifdef policy blocks for different releases?
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: [docker-selinux] Move docker interfaces from docker-selinux to selinux-policy dist-git repo.
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: Docker.if potential conflict
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• [docker-selinux] Move docker interfaces from docker-selinux to selinux-policy dist-git repo.
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: Docker.if potential conflict
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Docker.if potential conflict
  • From: William <william@xxxxxxxxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: David Li <dlipubkey@xxxxxxxxx>
• Re: Docker.if potential conflict
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: Docker.if potential conflict
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Docker.if potential conflict
  • From: William <william@xxxxxxxxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: RHEL 7 consoletype_exec interface issue
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: David Li <dlipubkey@xxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: David Li <dlipubkey@xxxxxxxxx>
• Re: [selinux] SElinux newbie question
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• SElinux newbie question
  • From: David Li <dlipubkey@xxxxxxxxx>
• Re: RHEL 7 consoletype_exec interface issue
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: [CentOS] CentOS-6 SSHD chroot SELinux problem
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• RE: SECMARK unlabeled_t & application access
  • From: RIJKEN Jeroen <jeroen.rijken@xxxxxxxxxxxxxxxxxx>
• Re: SECMARK unlabeled_t & application access
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [CentOS] CentOS-6 SSHD chroot SELinux problem
  • From: m.roth@xxxxxxxxx
• SECMARK unlabeled_t & application access
  • From: RIJKEN Jeroen <jeroen.rijken@xxxxxxxxxxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Matthew Saltzman <mjs@xxxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: guest_t allowed to enter directories labelled with admin_home_t
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: How to whitelist a user avc?
  • From: Bruno Wolff III <bruno@xxxxxxxx>
• guest_t allowed to enter directories labelled with admin_home_t
  • From: Mario Rosic <mail@xxxxxxxxxxxxx>
• Re: How to whitelist a user avc?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [NEWBIE, HELP] Help on my first contact with selinux.
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• How to whitelist a user avc?
  • From: Bruno Wolff III <bruno@xxxxxxxx>
• Re: Subgit SELinux issue
  • From: Matthew Saltzman <mjs@xxxxxxxxxxx>
• Re: [NEWBIE, HELP] Help on my first contact with selinux.
  • From: Alec Leamas <leamas.alec@xxxxxxxxx>
• Re: Packaging Icinga 2 requiring SELinux assistance
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Packaging Icinga 2 requiring SELinux assistance
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: Packaging Icinga 2 requiring SELinux assistance
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Packaging Icinga 2 requiring SELinux assistance
  • From: Shawn Starr <shawn.starr@xxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Matthew Saltzman <mjs@xxxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Trevor Hemsley <trevor.hemsley@xxxxxxxxxxxx>
• Re: Subgit SELinux issue
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Subgit SELinux issue
  • From: Matthew Saltzman <mjs@xxxxxxxxxxx>
• Updated Fedora policy github wiki page
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Deep Dive into MLS/MCS
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Deep Dive into MLS/MCS
  • From: Yan Naing Myint <yannaing@xxxxxxxxxxxxxxx>
• Re: [NEWBIE, HELP] Help on my first contact with selinux.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Labelling for RHEL 6 Software Collections
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: http process running as initrc_t
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: MCS labels not being enforced
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: /etc/php.ini and /etc/php.d labelled as etc_t
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: MCS labels not being enforced
  • From: Mario Rosic <mail@xxxxxxxxxxxxx>
• [NEWBIE, HELP] Help on my first contact with selinux.
  • From: Alec Leamas <leamas.alec@xxxxxxxxx>
• Re: http process running as initrc_t
  • From: Michael Bunk <bunk@xxxxxxxxxxxxxxxxxx>
• Re: Labelling for RHEL 6 Software Collections
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: Policy for Consul (Hashicorp)
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Re: MCS labels not being enforced
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: MCS labels not being enforced
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: /etc/php.ini and /etc/php.d labelled as etc_t
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• http process running as initrc_t
  • From: Divya Vyas <dvyas@xxxxxxxxxx>
• Re: MCS labels not being enforced
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: /etc/php.ini and /etc/php.d labelled as etc_t
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Prevent Apache from binding to port 80
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• MCS labels not being enforced
  • From: Mario Rosic <mail@xxxxxxxxxxxxx>
• Prevent Apache from binding to port 80
  • From: Mario Rosic <mail@xxxxxxxxxxxxx>
• Re: /etc/php.ini and /etc/php.d labelled as etc_t
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Policy for Consul (Hashicorp)
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Re: Can I change default policy from targeted to minimum
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• libselinux is a liar!!!
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Can I change default policy from targeted to minimum
  • From: Divya Vyas <dvyas@xxxxxxxxxx>
• Re: Can I change default policy from targeted to minimum
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Fwd: Can I change default policy from targeted to minimum
  • From: Divya Vyas <dvyas@xxxxxxxxxx>
• Re: RHEL 6 Confined Users Running Third-Party Services
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: RHEL 6 Confined Users Running Third-Party Services
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: RHEL 6 Confined Users Running Third-Party Services
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: "Missing" Audit logging in permissive mode
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• "Missing" Audit logging in permissive mode
  • From: Ted Rule <ejtr@xxxxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Tom Rivers <tom@xxxxxxxxxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Tom Rivers <tom@xxxxxxxxxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Jason L Tibbitts III <tibbs@xxxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Tom Rivers <tom@xxxxxxxxxxxxxxxxx>
• Re: selinux labels changed by restorecon after clean install
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: selinux labels changed by restorecon after clean install
  • From: Chris Murphy <lists@xxxxxxxxxxxxxxxxx>
• Re: selinux labels changed by restorecon after clean install
  • From: Chris Murphy <lists@xxxxxxxxxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Tom Rivers <tom@xxxxxxxxxxxxxxxxx>
• Re: selinux labels changed by restorecon after clean install
  • From: Ed Greshko <ed.greshko@xxxxxxxxxxx>
• Re: selinux labels changed by restorecon after clean install
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• selinux labels changed by restorecon after clean install
  • From: Chris Murphy <lists@xxxxxxxxxxxxxxxxx>
• SELinux is preventing pyzor from getattr access on the file /usr/bin/rpm
  • From: Tom Rivers <tom@xxxxxxxxxxxxxxxxx>
• Re: Unable to login with targeted policy, enforcing mode
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: sVirt and shared disk
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: sVirt and shared disk
  • From: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
• sVirt and shared disk
  • From: Luc de Louw <luc@xxxxxxxxx>
• Unable to login with targeted policy, enforcing mode
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: bacula-fd and relabelto
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• bacula-fd and relabelto
  • From: Bill shirley <bill@xxxxxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: "Lakshmipathi.G" <lakshmipathi.g@xxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• Re: Please help me in resolving this issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Please help me in resolving this issue
  • From: Srinivasa Rao Ragolu <sragolu@xxxxxxxxxx>
• 'CVE-2015-4495 and SELinux', Or why doesn't SELinux confine Firefox?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Would selinux have provided protection against this firefox exploit?
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: Would selinux have provided protection against this firefox exploit?
  • From: William Brown <william@xxxxxxxxxxxxxxxx>
• Re: Would selinux have provided protection against this firefox exploit?
  • From: Ed Greshko <ed.greshko@xxxxxxxxxxx>
• Re: Would selinux have provided protection against this firefox exploit?
  • From: William Brown <william@xxxxxxxxxxxxxxxx>
• Would selinux have provided protection against this firefox exploit?
  • From: Ed Greshko <ed.greshko@xxxxxxxxxxx>
• Re: mod_selinux denial with httpd
  • From: William Brown <william@xxxxxxxxxxxxxxxx>
• Re: mod_selinux denial with httpd
  • From: William Brown <william@xxxxxxxxxxxxxxxx>
• Re: mod_selinux denial with httpd
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• mod_selinux denial with httpd
  • From: William Brown <william@xxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: Conflict between local module and local fcontext
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Conflict between local module and local fcontext
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• [HEADS UP] policycoreutils - python3 and utilities moved to policycoreutils-python-utils
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: fedora 22
  • From: m.roth@xxxxxxxxx
• man pages are in -devel package
  • From: Ian Pilcher <arequipeno@xxxxxxxxx>
• Re: [HEADS UP] SELinux policy store migration in Rawhide
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: fedora 22
  • From: Trevor Hemsley <trevor.hemsley@xxxxxxxxxxxx>
• Re: fedora 22
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: Jeff Boyce <jboyce@xxxxxxxxxxxxxxx>
• fedora 22
  • From: m.roth@xxxxxxxxx
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Sandbox Firefox
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Sandbox Firefox
  • From: Robert Gabriel <ephemeric@xxxxxxxxx>
• [HEADS UP] SELinux policy store migration in Rawhide
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: lvrabec-selinux BLOG
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: lvrabec-selinux BLOG
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: lvrabec-selinux BLOG
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• lvrabec-selinux BLOG
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: Jeff Boyce <jboyce@xxxxxxxxxxxxxxx>
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: m.roth@xxxxxxxxx
• Re: How to (or should I?) change unconfined_u to system_u for a file
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• How to (or should I?) change unconfined_u to system_u for a file
  • From: Jeff Boyce <jboyce@xxxxxxxxxxxxxxx>
• Re: deny_execmem Rhel7
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Report an AVC to Bugzilla, without the sealert GUI (was: 'su' in a Docker container -> AVC)
  • From: Laurent Rineau <laurent.rineau__fedora@xxxxxxxxxxxxxx>
• deny_execmem Rhel7
  • From: <Tim.Einmahl@xxxxxx>
• Re: 'su' in a Docker container -> AVC
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: 'su' in a Docker container -> AVC
  • From: Laurent Rineau <laurent.rineau__fedora@xxxxxxxxxxxxxx>
• Re: 'su' in a Docker container -> AVC
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: 'su' in a Docker container -> AVC
  • From: Laurent Rineau <laurent.rineau__fedora@xxxxxxxxxxxxxx>
• Re: 'su' in a Docker container -> AVC
  • From: Laurent Rineau <laurent.rineau__fedora@xxxxxxxxxxxxxx>
• Re: 'su' in a Docker container -> AVC
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• 'su' in a Docker container -> AVC
  • From: Laurent Rineau <laurent.rineau__fedora@xxxxxxxxxxxxxx>
• Re: "SELinux insides" blog
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: "SELinux insides" blog
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• New issue with Fedora 22
  • From: David Highley <dhighley@xxxxxxxxxxxxxxxxxxxxxxx>
• Re: "SELinux insides" blog
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• "SELinux insides" blog
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: SELinux: Interface Labeling Problem
  • From: Maurizio Pagani <pag.maurizio@xxxxxxxxx>
• Re: Policy not taking effect
  • From: Ted Toth <txtoth@xxxxxxxxx>
• Re: Policy not taking effect
  • From: Steve Ross <sross@xxxxxxxxxxxxx>
• Policy not taking effect
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: secure_mode_policyload troubles
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: secure_mode_policyload troubles
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: secure_mode_policyload troubles
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• secure_mode_policyload troubles
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: Adding new type
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: Adding new type
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Adding new type
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: Adding new type
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: Adding new type
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: Adding new type
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Adding new type
  • From: Marko Rauhamaa <marko@xxxxxxxxxx>
• Re: CentOS 7 selinux policy bug [SOLVED]
  • From: m.roth@xxxxxxxxx
• Try II: selinux, xfs, and CentOS 6 and 5 issue [SOLVED]
  • From: m.roth@xxxxxxxxx
• [CFP] Reminder: Linux Security Summit 2015 CFP closes this Friday 5th June
  • From: James Morris <jmorris@xxxxxxxxx>
• Re: CentOS 7 selinux policy bug
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Try II: selinux, xfs, and CentOS 6 and 5 issue
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: CentOS 7 selinux policy bug
  • From: m.roth@xxxxxxxxx
• Try II: selinux, xfs, and CentOS 6 and 5 issue
  • From: m.roth@xxxxxxxxx
• Re: AVC denied when connecting to a socket
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• CentOS 6 formatted xfs drive on a CentOS 5 system, selinux errors
  • From: m.roth@xxxxxxxxx
• Re: confining daemons
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: confining daemons
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• confining daemons
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: CentOS 7 selinux policy bug
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: CentOS 7 selinux policy bug
  • From: m.roth@xxxxxxxxx
• Re: CentOS 7 selinux policy bug
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• CentOS 7 selinux policy bug
  • From: m.roth@xxxxxxxxx
• AVC denied when connecting to a socket
  • From: Juan Orti Alcaine <j.orti.alcaine@xxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: selinux enforcing and systemd-journald-dev-log.socket
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• selinux enforcing and systemd-journald-dev-log.socket
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: transition from init_rc
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Fwd: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Fwd: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Fwd: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Fwd: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• transition from init_rc
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• redirect stdout and stderr to different file under sandboxing in linux
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: how does SELinux/SVirt protect against the VENOM vuln?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: selinux process transition not taking place
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• Re: selinux process transition not taking place
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• Re: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Re: selinux process transition not taking place
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• Re: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Re: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Re: selinux process transition not taking place
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• Re: selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Re: selinux process transition not taking place
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• selinux process transition not taking place
  • From: SZIGETVÁRI János <jszigetvari@xxxxxxxxx>
• Re: how does SELinux/SVirt protect against the VENOM vuln?
  • From: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
• how does SELinux/SVirt protect against the VENOM vuln?
  • From: Chuck Anderson <cra@xxxxxxx>
• Re: Book-length reccomendations?
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: Book-length reccomendations?
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Book-length reccomendations?
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: Improper labelling on creation.
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Icinga2 ping append var_lib_t
  • From: Lee Clemens <java@xxxxxxxxxxxxxx>
• Improper labelling on creation.
  • From: Erinn Looney-Triggs <erinn.looneytriggs@xxxxxxxxx>
• Re: runcon: invalid context
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Re: runcon: invalid context
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: runcon: invalid context
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• runcon: invalid context
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Re: Requesting feedback on providing containment of sslh
  • From: James Hogarth <james.hogarth@xxxxxxxxx>
• Re: Requesting feedback on providing containment of sslh
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: Requesting feedback on providing containment of sslh
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Requesting feedback on providing containment of sslh
  • From: James Hogarth <james.hogarth@xxxxxxxxx>
• Re: "invalid security context" in custom policy
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: "invalid security context" in custom policy
  • From: Simon Sekidde <ssekidde@xxxxxxxxxx>
• Re: "invalid security context" in custom policy
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• "invalid security context" in custom policy
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Re: tor_t: SELinux prevents tor from starting when using ControlSocket feature
  • From: nusenu <nusenu@xxxxxxxxxxxxxxx>
• Re: Proper location for slapd kerberos ticket cache
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Proper location for slapd kerberos ticket cache
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Proper location for slapd kerberos ticket cache
  • From: Jason L Tibbitts III <tibbs@xxxxxxxxxxx>
• Re: Running iotop as sysadm_r
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Running iotop as sysadm_r
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: Running iotop as sysadm_r
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: tor_t: SELinux prevents tor from starting when using ControlSocket feature
  • From: nusenu <nusenu@xxxxxxxxxxxxxxx>
• Re: tor_t: SELinux prevents tor from starting when using ControlSocket feature
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Running iotop as sysadm_r
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: Strange requirement: confine unconfined
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: tor_t: actually allowed tcp ports
  • From: nusenu <nusenu@xxxxxxxxxxxxxxx>
• Re: tor_t: SELinux prevents tor from starting when using ControlSocket feature
  • From: Nusenu <nusenu@xxxxxxxxxxxxxxx>
• RE: Unexpected behavior in permissive mode
  • From: "Joseph L. Casale" <jcasale@xxxxxxxxxxxxxxxxx>
• Re: tor_t: actually allowed tcp ports
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• tor_t: SELinux prevents tor from starting when using ControlSocket feature
  • From: Nusenu <nusenu@xxxxxxxxxxxxxxx>
• Re: tor_t: actually allowed tcp ports
  • From: Nusenu <nusenu@xxxxxxxxxxxxxxx>
• Re: Unexpected behavior in permissive mode
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• RE: Unexpected behavior in permissive mode
  • From: "Joseph L. Casale" <jcasale@xxxxxxxxxxxxxxxxx>
• Re: Unexpected behavior in permissive mode
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: tor_t: actually allowed tcp ports
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: Change process domain upon reading a file
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• RE: Unexpected behavior in permissive mode
  • From: "Joseph L. Casale" <jcasale@xxxxxxxxxxxxxxxxx>
• Re: Unexpected behavior in permissive mode
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: tor_t: actually allowed tcp ports
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• tor_t: actually allowed tcp ports
  • From: Nusenu <nusenu@xxxxxxxxxxxxxxx>
• Re: Btrfs send receive + Samba, ERROR: lsetxattr security.selinux= failed. Operation not supported.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Btrfs send receive + Samba, ERROR: lsetxattr security.selinux= failed. Operation not supported.
  • From: Chris Murphy <lists@xxxxxxxxxxxxxxxxx>
• Re: Btrfs send receive + Samba, ERROR: lsetxattr security.selinux= failed. Operation not supported.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Change process domain upon reading a file
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Unexpected behavior in permissive mode
  • From: "Joseph L. Casale" <jcasale@xxxxxxxxxxxxxxxxx>
• Btrfs send receive + Samba, ERROR: lsetxattr security.selinux= failed. Operation not supported.
  • From: Chris Murphy <lists@xxxxxxxxxxxxxxxxx>
• Re: Change process domain upon reading a file
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: New Article on Future Docker Security.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Change process domain upon reading a file
  • From: "W. Michael Petullo" <mike@xxxxxxxx>
• Re: New Article on Future Docker Security.
  • From: Bob Gustafson <bobgus@xxxxxxx>
• RE: How do I create a directory in C that will follow selinux file context rules?
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• Re: How do I create a directory in C that will follow selinux file context rules?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Strange requirement: confine unconfined
  • From: "W. Michael Petullo" <mike@xxxxxxxx>
• RE: How do I create a directory in C that will follow selinux file context rules?
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• Re: How do I create a directory in C that will follow selinux file context rules?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: How do I create a directory in C that will follow selinux file context rules?
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• RE: How do I create a directory in C that will follow selinux file context rules?
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• Ubuntu Selinux
  • From: ezinne mbah <ezyskies@xxxxxxxxx>
• Re: How do I create a directory in C that will follow selinux file context rules?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: How do I create a directory in C that will follow selinux file context rules?
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• How do I create a directory in C that will follow selinux file context rules?
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• New Article on Future Docker Security.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Fedora 21, unable to add new file context
  • From: Mark Montague <mark@xxxxxxxxxxx>
• Tuning Docker with the newest security enhancements
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Fedora 21, unable to add new file context
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Fedora 21, unable to add new file context
  • From: Mark Montague <mark@xxxxxxxxxxx>
• Re: [selinux] Re: Idiomatic solution for tiny systemd "services"?
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Idiomatic solution for tiny systemd "services"?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [selinux] Re: Idiomatic solution for tiny systemd "services"?
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: boolean secure_mode under Rhel7
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• boolean secure_mode under Rhel7
  • From: <Tim.Einmahl@xxxxxx>
• Re: selocal script also for RedHat??
  • From: Milos Malik <mmalik@xxxxxxxxxx>
• selocal script also for RedHat??
  • From: Maurizio Pagani <pag.maurizio@xxxxxxxxx>
• MCS issues
  • From: Tracy Reed <treed@xxxxxxxxxxxxxxx>
• Re: rpm_exec and confined type for rpm scriptlets
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• Re: rpm_exec and confined type for rpm scriptlets
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• rpm_exec and confined type for rpm scriptlets
  • From: Cretu Adrian <adycrt@xxxxxxxxx>
• Re: [selinux] Re: Idiomatic solution for tiny systemd "services"?
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: [selinux] Re: Idiomatic solution for tiny systemd "services"?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [selinux] Re: Idiomatic solution for tiny systemd "services"?
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Re: Idiomatic solution for tiny systemd "services"?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Idiomatic solution for tiny systemd "services"?
  • From: Robin Lee Powell <rlpowell@xxxxxxxxxxxxxxxxxx>
• Core policy upgrades and assigned ports
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: Creating home directories with wrong context
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: George Karakougioumtzis <mad-proffessor@xxxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: Jason L Tibbitts III <tibbs@xxxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Issues with sshd writing to the kernel keyring
  • From: Jason L Tibbitts III <tibbs@xxxxxxxxxxx>
• Issues with sshd writing to the kernel keyring
  • From: Jason L Tibbitts III <tibbs@xxxxxxxxxxx>
• RE: Creating home directories with wrong context
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• RE: Creating home directories with wrong context
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• Re: audit2allow help to allow, but how to disallow
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: audit2allow help to allow, but how to disallow
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: audit2allow help to allow, but how to disallow
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: audit2allow help to allow, but how to disallow
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: audit2allow help to allow, but how to disallow
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: place for Postfix keytab files to make selinux happy
  • From: Anthony Messina <amessina@xxxxxxxxxxxx>
• Re: place for Postfix keytab files to make selinux happy
  • From: Stephen Ingram <sbingram@xxxxxxxxx>
• Re: audit2allow help to allow, but how to disallow
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• audit2allow help to allow, but how to disallow
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: Creating home directories with wrong context
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Fetchmail as root
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• RE: Creating home directories with wrong context
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• Re: Fetchmail as root
  • From: Glandvador <glandvador@xxxxxxxxx>
• Re: Fetchmail as root
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Fetchmail as root
  • From: Gland Vador <glandvador@xxxxxxxxx>
• Re: Creating home directories with wrong context
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Creating home directories with wrong context
  • From: Jayson Hurst <swazup@xxxxxxxxxxx>
• Re: fcontext equivalence listing
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: fcontext equivalence listing
  • From: Milos Malik <mmalik@xxxxxxxxxx>
• fcontext equivalence listing
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Strange restriction for setfiles_t
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: system-config-linux.py GUI inserts corrupt file labeling rule
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Strange restriction for setfiles_t
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Strange restriction for setfiles_t
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: system-config-linux.py GUI inserts corrupt file labeling rule
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Looking for a SELinux Demo
  • From: MJang <mike@xxxxxxxxxxxxx>
• Re: system-config-linux.py GUI inserts corrupt file labeling rule
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• system-config-linux.py GUI inserts corrupt file labeling rule
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Strange restriction for setfiles_t
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Need to rebuild an old module with outdated syntax
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Need to rebuild an old module with outdated syntax
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Need to rebuild an old module with outdated syntax
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Need to rebuild an old module with outdated syntax
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Need to rebuild an old module with outdated syntax
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Need to rebuild an old module with outdated syntax
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Need to rebuild an old module with outdated syntax
  • From: Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx>
• Re: Fedora 21 running sendmail, selinux preventing spamc write access to a fifo
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Fedora 21 running sendmail, selinux preventing spamc write access to a fifo
  • From: "James T. Kirk" <jtkirk@xxxxxxxxxxxx>
• Re: dhcpd_t needs efs_port_t:socket name_bind
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: Fedora 21 running sendmail, selinux preventing spamc write access to a fifo
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Best practice for new policy
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: dhcpd_t needs efs_port_t:socket name_bind
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Fedora 21 running sendmail, selinux preventing spamc write access to a fifo
  • From: jtkirk <jtkirk@xxxxxxxxxxxx>
• Best practice for new policy
  • From: "Joseph L. Casale" <jcasale@xxxxxxxxxxxxxxxxx>
• Re: Looking for a SELinux Demo
  • From: Christina Plummer <cplummer@xxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Looking for a SELinux Demo
  • From: MJang <mike@xxxxxxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: checkpolicy doesn't know interface "gnome_manage_generic_home_content"
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: dhcpd_t needs efs_port_t:socket name_bind
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: dhcpd_t needs efs_port_t:socket name_bind
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: checkpolicy doesn't know interface "gnome_manage_generic_home_content"
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: place for Postfix keytab files to make selinux happy
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: Philip Seeley <pseeley@xxxxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• Re: Problem running "selinux sandbox" with java
  • From: William Muriithi <william.muriithi@xxxxxxxxx>
• dhcpd_t needs efs_port_t:socket name_bind
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Problem running "selinux sandbox" with java
  • From: Bhuvan Gupta <bhuvangu@xxxxxxxxx>
• checkpolicy doesn't know interface "gnome_manage_generic_home_content"
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• place for Postfix keytab files to make selinux happy
  • From: Stephen Ingram <sbingram@xxxxxxxxx>
• Re: semodule -i fails.
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: semodule -i fails.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: semodule -i fails.
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• semodule -i fails.
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: SELinux alert in Fedora 21
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: SELinux alert in Fedora 21
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: SELinux alert in Fedora 21
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• Re: SELinux alert in Fedora 21
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• SELinux alert in Fedora 21
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: targeted policy relabels *everything*?
  • From: m.roth@xxxxxxxxx
• Re: targeted policy relabels *everything*?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: targeted policy relabels *everything*?
  • From: m.roth@xxxxxxxxx
• Re: targeted policy relabels *everything*?
  • From: Tristan Santore <tristan.santore@xxxxxxxxxxxxxxxxxxxxx>
• Re: targeted policy relabels *everything*?
  • From: m.roth@xxxxxxxxx
• Re: targeted policy relabels *everything*?
  • From: Tristan Santore <tristan.santore@xxxxxxxxxxxxxxxxxxxxx>
• targeted policy relabels *everything*?
  • From: m.roth@xxxxxxxxx
• Re: Selinux blocks system calls
  • From: Milos Malik <mmalik@xxxxxxxxxx>
• Re: Selinux blocks system calls
  • From: jiun bookworm <thebookworm101@xxxxxxxxx>
• Re: Selinux blocks system calls
  • From: Vadym Chepkov <vchepkov@xxxxxxxxx>
• Re: Selinux blocks system calls
  • From: Milos Malik <mmalik@xxxxxxxxxx>
• Selinux blocks system calls
  • From: Vadym Chepkov <vchepkov@xxxxxxxxx>
• Re: Precidence of lookups from /etc/selinux/targeted/contexts/files/file_contexts.local
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Precidence of lookups from /etc/selinux/targeted/contexts/files/file_contexts.local
  • From: William Hargrove <William.Hargrove@xxxxxx>
• Re: polyinstatiation and pulseaudio problems
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: polyinstatiation and pulseaudio problems
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• Re: No semantic av rules displayed by "sesearch -A -s httpd_sys_script_t -p name_bind -C | grep -v ^D"
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: polyinstatiation and pulseaudio problems
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: No semantic av rules displayed by "sesearch -A -s httpd_sys_script_t -p name_bind -C | grep -v ^D"
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Ruby random UDP port bind in DNS resolver
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: Ruby random UDP port bind in DNS resolver
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: No semantic av rules displayed by "sesearch -A -s httpd_sys_script_t -p name_bind -C | grep -v ^D"
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: Ruby random UDP port bind in DNS resolver
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: No semantic av rules displayed by "sesearch -A -s httpd_sys_script_t -p name_bind -C | grep -v ^D"
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• polyinstatiation and pulseaudio problems
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• No semantic av rules displayed by "sesearch -A -s httpd_sys_script_t -p name_bind -C | grep -v ^D"
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: What the best way to resolve these AVC's
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• What the best way to resolve these AVC's
  • From: Ed Greshko <ed.greshko@xxxxxxxxxxx>
• Ruby random UDP port bind in DNS resolver
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: Optional policy block on some macros
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: Optional policy block on some macros
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: Diagnostic messages
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: sssd_be port type
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: Diagnostic messages
  • From: Gian Luca Ortelli <gianluca.ortelli@xxxxxxxxxx>
• sssd_be port type
  • From: m.roth@xxxxxxxxx
• Re: Diagnostic messages
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Diagnostic messages
  • From: Gian Luca Ortelli <gianluca.ortelli@xxxxxxxxxx>
• Re: Optional policy block on some macros
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: find invalid fcontext without autorelabeling
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: find invalid fcontext without autorelabeling
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• Re: find invalid fcontext without autorelabeling
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Optional policy block on some macros
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: find invalid fcontext without autorelabeling
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• Re: Diagnostic messages
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• find invalid fcontext without autorelabeling
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• Optional policy block on some macros
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Diagnostic messages
  • From: Gian Luca Ortelli <gianluca.ortelli@xxxxxxxxxx>
• Re: custom logwatch crontab issues
  • From: Dmitry Makovey <dmitry@xxxxxxxxxxxxx>
• Re: custom logwatch crontab issues
  • From: Dmitry Makovey <dmitry@xxxxxxxxxxxxx>
• custom logwatch crontab issues
  • From: Dmitry Makovey <dmitry@xxxxxxxxxxxxx>
• SECMARK type containment strategy
  • From: Philip Seeley <pseeley@xxxxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• building selinux-policy from source on fedora core
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• RE: Managing SELinux in the Enterprise
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Mark Montague <mark@xxxxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• Re: Add a new boolean
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• Re: Managing SELinux in the Enterprise
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Add a new boolean
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Tips for setting up a policy dev environment
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Add a new boolean
  • From: george karakou <mad-proffessor@xxxxxxxxxxx>
• Munin Policy
  • From: Gabriele Pohl <gp@xxxxxxxxx>
• Re: Add a new boolean
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: various programs communicating with SSSD
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• various programs communicating with SSSD
  • From: Milos Malik <mmalik@xxxxxxxxxx>
• Add a new boolean
  • From: Geo Karakou <mad-proffessor@xxxxxxxxxxx>
• Re: Tips for setting up a policy dev environment
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: Tips for setting up a policy dev environment
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Tips for setting up a policy dev environment
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: Recent bash vulnerability and SELinux containment
  • From: Dmitry Makovey <dmitry@xxxxxxxxxxxxx>
• Re: Roles in selinux
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: selinux Digest, Vol 127, Issue 13
  • From: Ted Rule <ejtr@xxxxxxxxxxxx>
• Re: Roles in selinux
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Roles in selinux
  • From: Jean-David Beyer <jeandavid8@xxxxxxxxxxx>
• Re: SELinux and the bash exploit.
  • From: Florian Weimer <fweimer@xxxxxxxxxx>
• Roles in selinux
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: SELinux and the bash exploit.
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• SELinux and the bash exploit.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Recent bash vulnerability and SELinux containment
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Recent bash vulnerability and SELinux containment
  • From: Dmitry Makovey <dmitry@xxxxxxxxxxxxx>
• Re: Recent bash vulnerability and SELinux containment
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Recent bash vulnerability and SELinux containment
  • From: Dmitry Makovey <dmitry@xxxxxxxxxxxxx>
• Re: Fwd: Query regarding role hierarchy SELinux
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Fwd: Query regarding role hierarchy SELinux
  • From: Harpreet <harpreet20@xxxxxxxxx>
• Re: SELinux is preventing /usr/sbin/setfiles from 'mac_admin' accesses on the capability2 .
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Managing SELinux in the Enterprise
  • From: Douglas Brown <doug.brown@xxxxxxxxxx>
• SELinux is preventing /usr/sbin/setfiles from 'mac_admin' accesses on the capability2 .
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: Is there a method for collect all selinux logs and create a graph??
  • From: "Robb III, George B." <forgeman@xxxxxxxxx>
• Re: Is there a method for collect all selinux logs and create a graph??
  • From: David Cafaro <dac@xxxxxxxxxx>
• Re: Is there a method for collect all selinux logs and create a graph??
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Is there a method for collect all selinux logs and create a graph??
  • From: Maurizio Pagani <pag.maurizio@xxxxxxxxx>
• Re: Setting-up Fedora-20 SELinux with Linode
  • From: "Lakshmipathi.G" <lakshmipathi.g@xxxxxxxxx>
• Re: Setting-up Fedora-20 SELinux with Linode
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>
• Setting-up Fedora-20 SELinux with Linode
  • From: "Lakshmipathi.G" <lakshmipathi.g@xxxxxxxxx>
• Re: Allowed rule is denied.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Selinux denial on clamd
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Allowed rule is denied.
  • From: dE <de.techno@xxxxxxxxx>
• RE: Selinux denial on clamd
  • From: "Watts M.R." <M.R.Watts@xxxxxxxxxxx>
• Re: Selinux denial on clamd
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Selinux denial on clamd
  • From: "Watts M.R." <M.R.Watts@xxxxxxxxxxx>
• Re: High weirdness and questionable utility of restorecond
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: [SOLVED] Activate a SELinux Module at Initial Install
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: High weirdness and questionable utility of restorecond
  • From: Jonathan Abbey <jonabbey@xxxxxxxxxxxxxxxx>
• Re: High weirdness and questionable utility of restorecond
  • From: Jonathan Abbey <jonabbey@xxxxxxxxxxxxxxxx>
• High weirdness and questionable utility of restorecond
  • From: Jonathan Abbey <jonabbey@xxxxxxxxxxxxxxxx>
• Re: [SOLVED] Activate a SELinux Module at Initial Install
  • From: "Dustin C. Hatch" <dustin.hatch@xxxxxxxxxxx>
• Re: Activate a SELinux Module at Initial Install
  • From: "Dustin C. Hatch" <dustin.hatch@xxxxxxxxxxx>
• Re: Activate a SELinux Module at Initial Install
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Activate a SELinux Module at Initial Install
  • From: "Dustin C. Hatch" <dustin.hatch@xxxxxxxxxxx>
• Re: Activate a SELinux Module at Initial Install
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Why does my confined application fail to start?
  • From: Göran Uddeborg <goeran@xxxxxxxxxxx>
• Re: Why does my confined application fail to start?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Setting httpd fcontexts on apache files which are subsequently reverted.
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Setting httpd fcontexts on apache files which are subsequently reverted.
  • From: William Hargrove <William.Hargrove@xxxxxx>
• Why does my confined application fail to start?
  • From: Göran Uddeborg <goeran@xxxxxxxxxxx>
• Re: MCS File store protection
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Activate a SELinux Module at Initial Install
  • From: "Dustin C. Hatch" <dustin.hatch@xxxxxxxxxxx>
• Re: MCS File store protection
  • From: David Compton <dacompton@xxxxxxxxx>
• MCS File store protection
  • From: David Compton <dacompton@xxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Klaus Lichtenwalder <lichtenwalder@xxxxxxxxx>
• Re: cron issues with bash source (UNCLASSIFIED)
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• RE: cron issues with bash source (UNCLASSIFIED)
  • From: "Shaw, Ray V CTR USARMY ARL (US)" <ray.v.shaw.ctr@xxxxxxxx>
• Re: cron issues with bash source (UNCLASSIFIED)
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• cron issues with bash source (UNCLASSIFIED)
  • From: "Shaw, Ray V CTR USARMY ARL (US)" <ray.v.shaw.ctr@xxxxxxxx>
• Multiple same specifications
  • From: maria@xxxxxxxx
• Re: libcap-ng 0.7.4-1 reached F19 -> now sandboxes are also broken in F19
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Two questions: Mailman and staff_u starting a process
  • From: Dominick Grift <dominick.grift@xxxxxxxxx>
• Re: Two questions: Mailman and staff_u starting a process
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Re: Two questions: Mailman and staff_u starting a process
  • From: Dominick Grift <dominick.grift@xxxxxxxxx>
• Re: Two questions: Mailman and staff_u starting a process
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Re: Two questions: Mailman and staff_u starting a process
  • From: Dominick Grift <dominick.grift@xxxxxxxxx>
• Re: Executables run by httpd
  • From: Dominick Grift <dominick.grift@xxxxxxxxx>
• Executables run by httpd
  • From: Matthew Saltzman <mjs@xxxxxxxxxxx>
• Re: libcap-ng 0.7.4-1 reached F19 -> now sandboxes are also broken in F19
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Two questions: Mailman and staff_u starting a process
  • From: Jeremy Young <jrm16020@xxxxxxxxx>
• Re: directory fcontext
  • From: mark <m.roth@xxxxxxxxx>
• Re: SELinux Development yum group proposal
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• Re: directory fcontext
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: SELinux Development yum group proposal
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: SELinux Development yum group proposal
  • From: Dominick Grift <dominick.grift@xxxxxxxxx>
• Re: directory fcontext
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: selinux, httpd, and lighttpd
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• SELinux Development yum group proposal
  • From: Lukas Zapletal <lzap@xxxxxxxxxx>
• selinux, httpd, and lighttpd
  • From: Gene Czarcinski <gczarcinski@xxxxxxxxx>
• directory fcontext
  • From: m.roth@xxxxxxxxx
• AW: SELinux blocks apachectl from stopping apache
  • From: "Konopka.Andre" <Andre.Konopka@xxxxxxxxxxxxxx>
• Re: SELinux blocks apachectl from stopping apache
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: SELinux blocks apachectl from stopping apache
  • From: "Kurian @ GnuHack" <kurian@xxxxxxxxxxx>
• SELinux blocks apachectl from stopping apache
  • From: "Konopka.Andre" <Andre.Konopka@xxxxxxxxxxxxxx>
• ANN: selinux-policy.git on fedorahosted moved to GitHub
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Weird un-audited denial on tmp_t
  • From: David <dac@xxxxxxxxxx>
• Re: semanage boolean fails
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: semanage boolean fails
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• semanage boolean fails
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: F2FS selinux contexts
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• F2FS selinux contexts
  • From: Brian Chadwick <brianchad@xxxxxxxxxxxxxx>
• libcap-ng 0.7.4-1 reached F19 -> now sandboxes are also broken in F19
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Re: X sandbox still broken in Fedora 20
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: X sandbox still broken in Fedora 20
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• X sandbox still broken in Fedora 20
  • From: Florian Weimer <fweimer@xxxxxxxxxx>
• Re: Allowing httpd restart a service
  • From: "Watts M.R." <M.R.Watts@xxxxxxxxxxx>
• Re: Allowing httpd restart a service
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Allowing httpd restart a service
  • From: "Watts M.R." <M.R.Watts@xxxxxxxxxxx>
• Re: Hosts file access
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Hosts file access
  • From: Emmett Culley <lst_manage@xxxxxxxxxxxxxxx>
• Re: Hosts file access
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Hosts file access
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: Hosts file access
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: Hosts file access
  • From: Emmett Culley <lst_manage@xxxxxxxxxxxxxxx>
• Re: Alert on mac_admin /usr/sbin/setfiles capability2
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: Alert on mac_admin /usr/sbin/setfiles capability2
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Alert on mac_admin /usr/sbin/setfiles capability2
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: system_u process does not have system_r
  • From: dE <de.techno@xxxxxxxxx>
• Re: system_u process does not have system_r
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• system_u process does not have system_r
  • From: dE <de.techno@xxxxxxxxx>
• Re: Hosts file access
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Hosts file access
  • From: Emmett Culley <lst_manage@xxxxxxxxxxxxxxx>
• Re: Fwd: Syntax error while compiling base.conf
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Fwd: Syntax error while compiling base.conf
  • From: Harpreet <harpreet20@xxxxxxxxx>
• Syntax error while compiling base.conf
  • From: Harpreet <harpreet20@xxxxxxxxx>
• Re: [PATCH for f20 1/4] Add basic files for functional tests in python
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• Re: [PATCH for f20 1/4] Add basic files for functional tests in python
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: [PATCH for f20 1/4] Add basic files for functional tests in python
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [PATCH for f20 1/4] Add basic files for functional tests in python
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• Re: [PATCH for f20 1/4] Add basic files for functional tests in python
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: [PATCH for f20 1/1] Remove changelog duplicate entries breaking timeline
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• [PATCH for f20 4/4] Add tests for file creation labeling functions
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• [PATCH for f20 3/4] Add tests for process labeling functions
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• [PATCH for f20 2/4] Add tests for file labeling functions
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• [PATCH for f20 1/4] Add basic files for functional tests in python
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• [PATCH for f20 1/1] Remove changelog duplicate entries breaking timeline
  • From: Rastislav Hepner <rastislav.hepner@xxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Re: AVC for powertop
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• AVC for powertop
  • From: William <william@xxxxxxxxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Re: iotop policy
  • From: Lukas Vrabec <lvrabec@xxxxxxxxxx>
• iotop policy
  • From: William Brown <william@xxxxxxxxxxxxxxx>
• Re: Where's findcon/indexcoin/replcon, setfilecon?
  • From: dE <de.techno@xxxxxxxxx>
• Re: sandbox -X broken on FC20?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• sandbox -X broken on FC20?
  • From: Robert Horovitz <robert.horovitz@xxxxxxxxxxxxx>
• Re: Where's findcon/indexcoin/replcon, setfilecon?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Where's findcon/indexcoin/replcon, setfilecon?
  • From: dE <de.techno@xxxxxxxxx>
• Re: setsebool returns word Killed
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: setsebool returns word Killed
  • From: Trevor Hemsley <trevor.hemsley@xxxxxxxxxxxx>
• setsebool returns word Killed
  • From: Shintaro Fujiwara <shintaro.fujiwara@xxxxxxxxx>
• Re: fcontext for perl modules (.pm)
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: the right way to delete a mistake in file contexts
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• fcontext for perl modules (.pm)
  • From: m.roth@xxxxxxxxx
• the right way to delete a mistake in file contexts
  • From: m.roth@xxxxxxxxx
• Re: Dovecot ldap cert access
  • From: Miroslav Grepl <mgrepl@xxxxxxxxxx>
• Re: journald bypassing MAC checks?
  • From: Florian Weimer <fweimer@xxxxxxxxxx>
• Re: journald bypassing MAC checks?
  • From: Daniel J Walsh <dwalsh@xxxxxxxxxx>
• Re: journald bypassing MAC checks?
  • From: Stephen Smalley <sds@xxxxxxxxxxxxx>