-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/06/2011 11:39 AM, Christoph A. wrote: > On 06/06/2011 05:33 PM, Daniel J Walsh wrote: >> What avc are you seeing. Most likely we should just allow the access. > > I'm not seeing any AVCs. > I suppose there are dontaudit rules for the sandbox types? > >> I have not tried to run thunderbird within a sandbox. > > >> But I would be willing to work with you to setup correct policy. Maybe >> we could create a new type just to allow the email client application. > > That would be great. - -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux Well first you probably need to suck in .gnupg directory. I would figure without that directory in the sandbox, would fail. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk3s+RsACgkQrlYvE4MpobMNYQCfSz5s22I8lA7ZpT/37JTG6cbi ynoAnikgwvRZ+5ofCNdcsaE1WCnUXda0 =MvII -----END PGP SIGNATURE----- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux