Tag Info

New answers tagged

1

Reality: yes, SELinux can confine the root user. This is possible because SELinux do not actually care about the current Unix user: all it sees is a supplementary metadata called the context (which includes, among other fields, a domain field) and which lets SELinux decides whether the requested action can be authorized or not. What one usually conceives ...


0

If you're getting an selinux AVC, you can set up a local policy to permit that particular action using the audit2allow tool: # audit2allow -M local -a This will create a policy (local.pp) that will permit anything that resulted in an selinux denial in your audit logs. You can then activate this module by running: # semodule -i local.pp You can see the ...


1

You could run a Linux distribution with SELinux enabled, such as Fedora, in a virtual machine. Installing Fedora in a VM takes only a few minutes, not including the download time. Use VM software that supports USB passthrough (such as VirtualBox with the non-open-source extensions) and access the disk directly from the VM.



Top 50 recent answers are included