Clarkson, Mike R (US SSA) wrote:
What are the differences between and advantages/disadvantages of the
following two commands:
runcon -l s1 <cmd>
newrole -l s1 --c <cmd>
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Of the top of my head
newrole will change the terminal to the level you want to output. So if
the app read/writes to the terminal it will work.
runcon will not so terminal apps will fail. Writing SystemHigh to a
SystemLow terminal should not work.
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
