Re: Removing semanage-added rules (Was: only allow 1 port for listening)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2007-08-08 at 13:07 -0500, Jason L Tibbitts III wrote:
> >>>>> "FT" == Forrest Taylor <ftaylor@xxxxxxxxxx> writes:
> 
> FT> Where you add a -a to add, replace that with a -d to delete, or a
> FT> -m to modify.
> 
> Yeah, that was overly easy.  I guess I was confused by how I'm
> supposed to know what "NAME" is, especially for fcontext rules where
> you give a pattern.  (NAME seems to be the pattern itself.)
> 
> I s there a simple way to know if an fcontext pattern matches anything
> so I can tell if I'm going to screw my system before deleting one?

Do a -l to list it, and use grep to match your rule ;o)  semanage won't
let you remove a rule that is not there.  Nor will it let you add a rule
that already exists (you must modify it [-m]).

Forrest

Attachment: signature.asc
Description: This is a digitally signed message part

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux