-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 04/13/2013 01:07 PM, Michael Ludvig wrote: > Hi > > On 13/04/13 18:31, yersinia wrote: >> If you want disable selinux only for a specific domain you can define >> this as a permissive domain , in recent distros. Or in old distro, set >> the selinux boolean for not do the selinux domain transition. As an >> example , the first solution could be applied in rhel6 , the second in >> rhel5. >> > > Would that mean disabling (or making permissive) all "snmpd_t"? How do I do > this in RHEL6? > > I would rather find a way to run unrestricted hpacucli from restricted > snmpd_t though. > > Cheers > > Michael -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/selinux > semanage permissive -a -t snmpd_t Would put it in permissive. Then run your tests and attach your avcs -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlFtn4UACgkQrlYvE4MpobPqhQCgr6mlJMHI5UQR5gz9lV5CNEGJ cf8AoJ9/2X4G6DyZJq8ndQZb304WbB9V =zwEs -----END PGP SIGNATURE----- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
