Tag Info

New answers tagged


Reality: yes, SELinux can confine the root user. This is possible because SELinux do not actually care about the current Unix user: all it sees is a supplementary metadata called the context (which includes, among other fields, a domain field) and which lets SELinux decides whether the requested action can be authorized or not. What one usually conceives ...


If you're getting an selinux AVC, you can set up a local policy to permit that particular action using the audit2allow tool: # audit2allow -M local -a This will create a policy (local.pp) that will permit anything that resulted in an selinux denial in your audit logs. You can then activate this module by running: # semodule -i local.pp You can see the ...


You could run a Linux distribution with SELinux enabled, such as Fedora, in a virtual machine. Installing Fedora in a VM takes only a few minutes, not including the download time. Use VM software that supports USB passthrough (such as VirtualBox with the non-open-source extensions) and access the disk directly from the VM.

Top 50 recent answers are included