Understanding SELinux

Colin Walters walters at redhat.com
Mon Dec 6 21:37:28 UTC 2004


On Mon, 2004-12-06 at 13:19 -0800, Tom London wrote:
> On Mon, 06 Dec 2004 16:07:41 -0500, Colin Walters <walters at redhat.com> wrote:
> >
> > Is this just debugging output or something?  Or is that actually how
> > squid writes its normal logging information instead of via syslog?
> > 
> Colin,
> 
> I'm not a squid expert, but I suspect that this is
> there to capture any stdout/stderr from squid.

I'd suggest just removing that from the init script then; in error cases
you probably want the output to the terminal anyways, just like how most
other daemons work.  (Although right now the policy also denies access
to the terminal, long term I hope we'll come up with a good general
solution for that problem for all daemons).





More information about the fedora-selinux-list mailing list