using selinux to control user access to files

Hein Coulier hein.coulier at
Fri May 6 09:20:38 UTC 2005

hi, newby speaking here (totally lost in the selinux labyrinth).

What i want to accomplish with selinux is the following : i want to allow
different end-users (with different roles) to do something with some files.
I'll give you an example :

fileA : may be read by roleA and roleB
fileB : may only be read by roleB ; audited
fileC : may be read and changed by roleB ; audited

I read several pdf's, read the o'reilly book, but i seem to be unable to
achieve my goal.
Help would be appreciated.

tia, hecou.

More information about the fedora-selinux-list mailing list