On Fri, 04 Mar 2005 15:07:30 +0100, Holger Burde said:
> Hi;
>
> I am looking for Infos on how to add new user domains to the FC3
> targeted Policy. Any examples/papers available ? The only example
> one i found depends on a user.te file in $SEHOME/domains which is not
> available in FC3-targeted (examples based on that do not work).

New user domains won't work in -targeted because the whole idea of targeted is "dump all 'real' users in -unrestricted_t and only really enforce on some of the daemon_t types". You need to run -strict to have the separation needed to make multiple user domains make any sense at all..

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



application/pgp-signature attachment: stored