FC6 SELinux issues

Daniel J Walsh dwalsh at redhat.com
Tue Oct 17 21:14:37 UTC 2006


Gene Czarcinski wrote:
> On Thursday 05 October 2006 10:29, Daniel J Walsh wrote:
>   
>> MLS Policy is a server only policy.  IE We don not support X-Windows.  
>> So if you want to change to MLS you need to remove all X-Windows
>> software and relabel.  Then it should work, but you need to understand
>> how an MLS environment works.
>>     
>
> OK, I have setup something I consider to be server oriented (no X).  I get a 
> bunch of avc denied messages (permissive mode).
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209950
>
>   
>> Strict policy is not heavily tested in Fedora.  Most people run
>> targeted.  We will look at any problems that you have with it, though.
>>     
>
> Most of the problems in mls mode seem to be the same in strict mode.
>
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209949
>
> I assume that strict mode should be capable of running X ... true or false?
>   
Yes it should be allowed to run X.




More information about the fedora-selinux-list mailing list