FC6 SELinux issues
Daniel J Walsh
dwalsh at redhat.com
Tue Oct 17 21:14:37 UTC 2006
Gene Czarcinski wrote:
> On Thursday 05 October 2006 10:29, Daniel J Walsh wrote:
>
>> MLS Policy is a server only policy. IE We don not support X-Windows.
>> So if you want to change to MLS you need to remove all X-Windows
>> software and relabel. Then it should work, but you need to understand
>> how an MLS environment works.
>>
>
> OK, I have setup something I consider to be server oriented (no X). I get a
> bunch of avc denied messages (permissive mode).
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209950
>
>
>> Strict policy is not heavily tested in Fedora. Most people run
>> targeted. We will look at any problems that you have with it, though.
>>
>
> Most of the problems in mls mode seem to be the same in strict mode.
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209949
>
> I assume that strict mode should be capable of running X ... true or false?
>
Yes it should be allowed to run X.
More information about the fedora-selinux-list
mailing list