Stephen Smalley sds at tycho.nsa.gov
Fri Sep 9 16:26:21 UTC 2005

On Fri, 2005-09-09 at 12:24 -0400, Ma. Alejandra Castillo wrote:
> Dear all, 
> i have a question for you, when i execute the comand id -Z  for
> example:
> id -Z for the users root i obtain this output
>  root:system_r:unconfined_t
> id -Z for the user mai  user_u:system_r:unconfined_t
> and the same happens with all the users that i have created.
> why does it appear as unconfined_t??
> how can y change this?

By default, Fedora uses a "targeted" policy that only confines specific
daemons and not users.  The original policy (called "strict") is also
available as an option, but you have to install it and switch over to
it.  See the Fedora SELinux FAQ,

Stephen Smalley
National Security Agency

More information about the fedora-selinux-list mailing list