using selinux to control user access to files
russell at coker.com.au
Tue Jul 12 12:59:37 UTC 2005
On Tuesday 10 May 2005 01:25, Valdis.Kletnieks at vt.edu wrote:
> I remember seeing a statement on a RedHat page that their "lack of support"
> would basically mean "replicate your issue with enforcing=0 and then we'll
> talk", so things may not be as bad as all that...
It's a matter of reproduce with targeted policy, reproduce with selinux=0 or
maybe reproduce with enforcing=0 (NB enforcing=0 still has some small
potential to break things).
Also the exact details of how the problem must be reproduced will be
negotiated with the support person. For example if "ls" didn't display file
details correctly you should not be required to reboot with enforcing=0.
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
More information about the fedora-selinux-list