This is great news. Is there any installation docs on this or is it
as simple as:
installing the policy
updating SELinux config file
touch /.autorelabel
reboot
Thank you
On Fri, Mar 5, 2010 at 1:32 PM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:
> selinux-policy-3.6.32-99.fc12 on Fedora 12
>
> I did remove setroubleshoot and abrt, since these are really not appropriate
> with an MLS machine.
> Everything else is a straight install.
>
> My account logs in as user_t.
>
> Only AVC I am seeing now is
>
>
> allow user_t xserver_t:x_screen { saver_hide saver_setattr saver_show };
>
>
> I think this is caused by the screen saver kicking in.
>
> and
>
> #============= pulseaudio_t ==============
> #!!!! This avc is a constraint violation. You will need to add an attribute
> to either the source or target type to make it work.
>
> allow pulseaudio_t device_t:dir read;
>
>
> Which is caused because the /dev/snd directory gets created as SystemHigh.
> I have no idea why. I need to investigate who is creating the directory.
>
> Matchpathcon says it is supposed to be SystemLow. It must be a SystemHigh
> process that creates it.
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx
> with
> the words "unsubscribe selinux" without quotes as the message.
>
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
