Hello!
Could someone please take the strict policy and set a permissive default for unconfigured processes like in the targeted policy? That would be really great.
Thanks in advance, Mark
Mark Stier wrote:
Hello!
Could someone please take the strict policy and set a permissive default for unconfigured processes like in the targeted policy? That would be really great.
Thanks in advance, Mark
Install selinux-policy-strict-sources
Run system-config-securitylevel
Modify policy and select Admin
Turn on Allow rc scripts to run unconfined, including any daemon started by an rc script that does not have a domain transition explicitly defined. Allow xinetd to run unconfined, including any services it starts that do not have a domain transition explicitly defined.
Now try to restart the daemon that is broken.
Dan
On Wed, 2004-12-08 at 12:43, Daniel J Walsh wrote:
Turn on Allow rc scripts to run unconfined, including any daemon started by an rc script that does not have a domain transition explicitly defined. Allow xinetd to run unconfined, including any services it starts that do not have a domain transition explicitly defined.
Now try to restart the daemon that is broken.
Alternatively, couldn't he just chcon -t unconfined_exec_t /path/to/daemon and re-start it? Then only that daemon will run unconfined, not the rc script or inetd or any other daemon.
selinux@lists.fedoraproject.org