On 12/18/2015 10:05 AM, Dominick Grift wrote:
On Fri, Dec 18, 2015 at 11:27:13AM +0000, Hannu Savolainen wrote:
Many thanks,
Adding the allow rules seem to be enough (have to verify that one more time next week). Fortunately the typebounds rule doesn't seem to be necessary since it triggered avalanche of dependency problems everywhere.
Best regards,
Hannu
Cc: selinux list
I suspect though that you eventually really need to add the typebounds
statement.
typebounds is required for a multi-threaded process to setcon().
And note that setcon() only changes the context of the current thread,
not all threads in the process.
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
