>You don't want to leave daemons running in initrc_t. So you want to put kpropd into a domain, whether an existing one (if something similar in purpose and required accesses exists) or a new one, and then you can >ensure that the file will get the right type when created. Well, I undeestand what you're saying, but I'm just using the stock F8 policy. Is this bugzilla-worthy? -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
