RFC: SELinux model

Jan Synacek jsynacek at redhat.com
Fri Apr 18 06:40:36 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/17/2014 10:23 AM, Jan Synacek wrote:
> However, note that the description strings are pretty useless, they seem
> to be somehow generated, at least on my machine. For example:
> 
> httpd_can_network_connect      (on   ,   on)  Allow httpd to can network connect

I just found out what was happening. I had to install selinux-policy-devel to get
meaningful description, because they are pulled from
/usr/share/selinux/devel/policy.xml. Who knew...

Now I get:

httpd_can_network_connect      (on   ,   on)  Allow HTTPD scripts and modules to connect to the network using TCP.

- -- 
Jan Synacek
Software Engineer, Red Hat
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=xhtn
-----END PGP SIGNATURE-----


More information about the openlmi-devel mailing list