mozilla not starting in enforcing mode

Charles R. Anderson cra at WPI.EDU
Wed Jun 23 13:06:02 UTC 2004


On Wed, Jun 23, 2004 at 01:07:59PM +1000, Russell Coker wrote:
> > Has any thought been given to automatically, through policy, applying
> > certain labels to files as they are created?
> 
> Yes that is done.  If mozilla creates the file in question and nothing else 
> unlinks it then things will be fine.  However if something else creates it 
> first or unlinks it and re-creates it then it gets a type that Mozilla may 
> not be permitted write or read/write access (depending on policy).

I realize that file creation inherits the parent process's context. 
What I was suggesting was something to override that based on
filesystem path pattern, parent directory context, or something like
that.




More information about the fedora-selinux-list mailing list