using tmpfs for /tmp and selinux

Stephen Smalley sds at tycho.nsa.gov
Mon Mar 28 14:01:19 UTC 2005


On Sat, 2005-03-26 at 10:09 +0100, dragoran wrote:
> it still does not work with the restorecon /tmp line and the policy 
> changes....
> same avcs...

Hmmm...Dan reported it working for him with just those two changes.
That was on a FC4/devel system with strict policy, but I'd expect it to
work fine under FC3 and targeted policy too.  Are you sure that you
added 'allow tmpfile tmpfs_t:filesystem associate;' to your policy and
rebuilt it and installed it?  What are the specific avcs that you see?
   
-- 
Stephen Smalley <sds at tycho.nsa.gov>
National Security Agency




More information about the fedora-selinux-list mailing list