On Tue, 2012-03-27 at 17:17 -0400, seth vidal wrote:
And that is the more or less it - does anyone have any
suggestions/thoughts?
You don't have to limit yourself to picking between user_u or guest_u.
You can create another role, such as "fedorauser_u" that is basically
guest_u, except you can then add specific policies via SELinux roles,
such as:
irc_role(fedorauser_t, fedorauser_r)
Which should let them run an IRC client such as irsii.
On the other hand, just setting user_u is a good start and a lot less
work.
Best,
--
Konstantin Ryabitsev
Systems Administrator,
Kernel.org
Montréal, Québec