On Tuesday, 22 January 2019 8:17:15 PM AEDT Dominick Grift wrote: > > Allow transition to dpkg_t with nnp, Dominick seems to imply this > > shouldn't > > be necessary. > > You misunderstood. This is ok to allow, but without the > nnp_nosuid_transition policy capability set these processes setting nnp > would potentially cause issues with SELinux. OK thanks for the clarification. Debian has nnp_nosuid_transition=1 so it's all good. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/
