No more selinux-policy-*-sources

Daniel J Walsh dwalsh at redhat.com
Tue Mar 14 16:40:44 UTC 2006


Jeff Spaleta wrote:
> On 3/14/06, Stephen J. Smoogen <smooge at gmail.com> wrote:
>   
>> 3) They found a legitimate problem with selinux but did not have the
>> tools to debug it or had the training needed to fix it.
>>     
>
> I'm getting more comfortable with at least troubleshooting selinux
> errors by looking for avc error messages in the logs. But sometimes i
> run into head-scratching situations that people run into where there
> are no avc error messages being generated but putting selinux into
> permissive mode seems to help as a last resort.
>
> Are there selinux interactions which will not generate avc messages as
> a matter of selinux design?  If so how do i troubleshoot or even
> confirm that selinux policy is what an application is tripping over in
> those situations?
>
> -jef
>
>   
http://fedoraproject.org/wiki/SELinux/FAQ/ProposedAdditions#head-6dcc9a7f5f2d7e7ee033e777caacebb434713dd7




More information about the fedora-devel-list mailing list