AVC denial and the suggested actio to take (by the setroubleshoot details) window

Daniel J Walsh dwalsh at redhat.com
Fri Sep 25 17:28:32 UTC 2015


Why use symlinks versus bind mounts?  Or mount the directory there directly.

On 09/24/2015 07:20 PM, jd1008 wrote:
>
>
> On 09/24/2015 04:54 PM, Rahul Sundaram wrote:
>> Hi
>>
>> On Thu, Sep 24, 2015 at 4:20 PM, jd1008 wrote:
>>
>>     But /home is a symlink to /home on  another mount point.
>>     Would not selinux be "savvy" enough to follow symlinks???
>>
>>
>> Following symlinks can be a security problem.  It is pretty common
>> for that to be restricted by default
>>
>> Rahul
>>
>>
> Agreed.
> Thanks for the heads up.
>



More information about the users mailing list