mozilla not starting in enforcing mode
Charles R. Anderson
cra at WPI.EDU
Wed Jun 23 13:06:02 UTC 2004
On Wed, Jun 23, 2004 at 01:07:59PM +1000, Russell Coker wrote:
> > Has any thought been given to automatically, through policy, applying
> > certain labels to files as they are created?
>
> Yes that is done. If mozilla creates the file in question and nothing else
> unlinks it then things will be fine. However if something else creates it
> first or unlinks it and re-creates it then it gets a type that Mozilla may
> not be permitted write or read/write access (depending on policy).
I realize that file creation inherits the parent process's context.
What I was suggesting was something to override that based on
filesystem path pattern, parent directory context, or something like
that.
More information about the fedora-selinux-list
mailing list