SELinux

[khalid fahad]

Hi,
I have a question about SELiux. the question is (  Using the syntax from
sesearch output , provide a list of rules that you would create to confine
file access for a corporate finance application (e.g. accounts
payable/receivable, payroll). You should create type(s) for both the
process(es) and files. Ensure that you consider the wide variety of types
of data that this application would need to access).

i run the command (sesearch -A I grep -w '' ftpd_ t public content_ t'' )
and i get:-
allow ftpd_t  public_content_t : dir { ioctl read getattr lock search open
} ;
allow ftpd_t  public_content_t :  lnk file  { read getattr } ;
allow ftpd_t  public_content_t :  file { ioctl read getattr lock open } ;
can you help me to understand the concept of this question ?
best reg,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20180913/7841666f/attachment.htm>