On 03/05/2010 09:13 AM, Daniel J Walsh wrote:
> Yes I think labeling the bin directory in your homedir as bin_t will
> allow almost all confined applications on your system to execute them.
>
> The problem with SELinux is people think first of adding allow rules
> rather then fixing the labeling.
In defense of those just struggling to get by, that is generally what
setroubleshoot suggests. Plus, while the audit2allow route is fairly
obvious, it take a significantly deeper understanding of the base
policy to know which of the source or target types might wrong and
just what the proper labeling should be.
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
