> That should not happen does sesearch know the rules? > > sesearch -SC --allow -s voip_sandbox_t -t voip_sandbox_t -c process -p > execmem > > make sure that the rules is loaded > My bad! Forgot to include the new version of the module in the final build. It works as expected now - got two more AVCs (setsched and getattr on a shared MySQL file loading charsets), but I was expecting this sort of thing. -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
