> > > Wouldn't it work if you specify the process class in the policy file? > I'm pretty sure this should work on rhel/centos 5.x, don't have a way to > check this moment though: > This should work yes > ----------------------- > > module matlab 1.0; > require { > type unconfined_t; > class process execheap; > } > allow unconfined_t self:process execheap; > > ------------------------ -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux