Re: Removing semanage-added rules (Was: only allow 1 port for listening)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>>>>> "FT" == Forrest Taylor <ftaylor@xxxxxxxxxx> writes:

FT> Do a -l to list it, and use grep to match your rule ;o)

I was trying to see if an fcontext pattern actually matched any files
in the filesystem.  Actually I'd like to know something more specific:
if it actually has any effect.  It could be covered by another rule.

An example: I see a AVC denial on one file, add a rule to change the
context on that file and realize later that I need a rule matching the
whole directory.  A week later and I'm cleaning up; can I really
delete that first rule?  There are a whole lot of fcontext rules; how
do I know it really doesn't have any effect?

 - J<

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux