>>>>> "DJW" == Daniel J Walsh <dwalsh@xxxxxxxxxx> writes: DJW> What are the AVC's you are seeing. What domain is running ps DJW> command. I have one system with a cgi-type thing that calls ps and you basically have to allow, well, nearly everything. Since the files in /proc get labeled with the domain of the process, and ps needs to trawl through all of those, whatever runs ps needs to get all sorts of directory and file read access to any domain that might be running on the system. - J< -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
