I recently have decided I was going to play with selinux. Before I set the selinux value to enforcing I read up on it online and saw that to change my privileges I need to use the newrole command. It seemed simple enough, but I don't seem to have this command and there's also no man page on it. When I checked fedora forums some one had the same problem, and the only reply to it was to send an email here. Does anyone have any information that can help me out? I am using fedora 7 on a thinkpad T60 by the way.
--Brad
bradley wrote:
I recently have decided I was going to play with selinux. Before I set the selinux value to enforcing I read up on it online and saw that to change my privileges I need to use the newrole command. It seemed simple enough, but I don't seem to have this command and there's also no man page on it. When I checked fedora forums some one had the same problem, and the only reply to it was to send an email here. Does anyone have any information that can help me out? I am using fedora 7 on a thinkpad T60 by the way.
newrole is in policycoreutils-newrole package, which is installed with strict policy,i.e. selinux-policy-strict.
in normal system, there are only selinux-policy-targeted, which need not newrole command. before selinux-policy-targeted-3.0, there is not role structure, so newrole is not necessary.
strict policy is more strict than targeted policy, which will put normal user inconvenience. most of strict policy is used in special situation, such as military.
--Brad
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
selinux@lists.fedoraproject.org