On Mon, 2008-07-07 at 13:42 -0500, Serge E. Hallyn wrote: > It looks like unconfined_t is not granted setfcap capability. So > when running ltp as unconfined_t, the file capabilities test fails. > I'm just wondering what the right answer is: > > 1. require running ltp as an administrative type > 2. give ltp a custom policy module to create an ltp_t > 3. give setfcap to unconfined_t unconfined_t should have all capabilities already. Policy version? -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.