Policies for apache httpd and snmp
by susan_geller＠speakeasy.net
I installed Fedora Core 3 recently and haven't made any changes to the
configuration files in /etc.
I'm getting:
audit(1108296143.176:0): avc: denied { write } for pid=3971 exe=/usr/sbin/httpd name=mibs dev=hda1 ino=833921 scontext=user_u:system_r:httpd_t tcontext=system_u:object_r:usr_t tclass=dir
It seems that apache is trying to write to a file in the /usr/share/snmp/mibs directory.
I don't know enough about snmp to know what apache thinks it is trying to do, but I'm guessing I should allow it in my selinux policies.
Which policy do I change and how?
Thanks, Susan
19 years, 2 months
privoxy and targeted
by Tom London
Running targeted/enforcing, latest Rawhide.
Get the following from privoxy:
Feb 14 09:59:19 localhost kernel: audit(1108403959.792:0): avc:
denied { connect } for pid=5734 exe=/usr/sbin/privoxy
scontext=user_u:system_r:privoxy_t tcontext=user_u:system_r:privoxy_t
tclass=tcp_socket
Feb 14 09:59:19 localhost kernel: audit(1108403959.838:0): avc:
denied { connect } for pid=5733 exe=/usr/sbin/privoxy
scontext=user_u:system_r:privoxy_t tcontext=user_u:system_r:privoxy_t
tclass=tcp_socket
adding
allow privoxy_t self:tcp_socket connect;
to privoxy.te fixes....but I'm sure there is a better way to do this,
e.g., change
can_network_server(privoxy_t)
to
can_network(privoxy_t)
tom
--
Tom London
19 years, 2 months
How to let squirrelspell work in selinux?
by Hongwei Li
Hi,
I got the following error in system log when I click "Check Spelling" in
SquirrelMail 1.4.3a of my fc3 linux system:
Feb 14 09:36:02 pippo kernel: audit(1108395362.621:0): avc: denied {
search } for pid=10663 exe=/bin/cat name=spool dev=hda3 ino=470497
scontext=root:system_r:httpd_sys_script_t
tcontext=system_u:object_r:var_spool_t tclass=dir
The "Cehck Spelling" calls SquirrelSpell v0.3.8, which works well if
selinux is disabled. But, I'd like to have selinux enforced. My system:
os: RedHat FC3 linux, kernel-2.6.10-1.741_FC3, selinux
enforced, iptables enabled
selinux: selinux-policy-targeted-1.17.30-2.73
iptables: iptables-1.2.11-3.1.FC3
Can somebody tell me how to fix this problem?
Thanks a lot!
Hongwei Li
19 years, 2 months
Re: fedora-selinux-list Digest, Vol 12, Issue 11
by kent mcclanahan
Hey Steve,The csm at the end of my name stands for Certified Surpreme Master Gemcutter which was issued by the American Society of Gemcutters and not Walmart.I challenge you to try to obtain one!Kent McClanahan csm
fedora-selinux-list-request(a)redhat.com wrote:Send fedora-selinux-list mailing list submissions to
fedora-selinux-list(a)redhat.com
To subscribe or unsubscribe via the World Wide Web, visit
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
or, via email, send a message with subject or body 'help' to
fedora-selinux-list-request(a)redhat.com
You can reach the person managing the list at
fedora-selinux-list-owner(a)redhat.com
When replying, please edit your Subject line so it is more specific
than "Re: Contents of fedora-selinux-list digest..."
Today's Topics:
1. "invalid contex" question (David Hampton)
2. Re: "invalid contex" question (Stephen Smalley)
3. Re: "invalid contex" question (David Hampton)
4. Permissions for new users (Richard Jensen)
5. execmem and targeted policy (Colin Walters)
6. Re: execmem and targeted policy (Stephen Smalley)
7. Re: NAZI DATA (steve)
8. problems (steve)
9. Newbie to fedora/linux (Stephen Valenti)
10. Re: execmem and targeted policy (dragoran)
11. Re: Newbie to fedora/linux (ne...)
----------------------------------------------------------------------
Message: 1
Date: Thu, 10 Feb 2005 12:32:59 -0500
From: David Hampton
Subject: "invalid contex" question
To: fedora-selinux-list(a)redhat.com
Message-ID: <1108056779.29383.24.camel(a)hampton-pc.rainbolthampton.net>
Content-Type: text/plain; charset="us-ascii"
I'm running an FC3 system with the latest rawhide strict policy. I'm
currently trying to tweak the dovecot files for my system and am running
into an invalid context error. My changes so far:
Index: domains/program/dovecot.te
+type dovecot_data_t, file_type, sysadmfile;
+create_dir_file(dovecot_t, dovecot_data_t)
Index: file_contexts/program/dovecot.fc
+/var/spool/dovecot(/.*)? system_u:object_r:dovecot_data_t;
The problem is that after a 'make reload' when I try to relabel
the /var/spool/dovecot directory, I get the error message:
/etc/selinux/strict/contexts/files/file_contexts: line 999 has invalid
context system_u:object_r:dovecot_data_t;
Doing a 'make install' in the policy directory gives me this same error.
Is there something else I need to do to create this new type?
Thanks.
David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://www.redhat.com/archives/fedora-selinux-list/attachments/20050210/...
------------------------------
Message: 2
Date: Thu, 10 Feb 2005 12:31:15 -0500
From: Stephen Smalley
Subject: Re: "invalid contex" question
To: "Fedora SELinux support list for users & developers."
Message-ID: <1108056675.22172.108.camel(a)moss-spartans.epoch.ncsc.mil>
Content-Type: text/plain
On Thu, 2005-02-10 at 12:32, David Hampton wrote:
> Index: file_contexts/program/dovecot.fc
>
> +/var/spool/dovecot(/.*)? system_u:object_r:dovecot_data_t;
No semicolon terminators in file contexts files. They are just newline
delimited.
--
Stephen Smalley
National Security Agency
------------------------------
Message: 3
Date: Thu, 10 Feb 2005 12:54:42 -0500
From: David Hampton
Subject: Re: "invalid contex" question
To: "Fedora SELinux support list for users & developers."
Message-ID: <1108058082.29383.25.camel(a)hampton-pc.rainbolthampton.net>
Content-Type: text/plain; charset="us-ascii"
On Thu, 2005-02-10 at 12:31 -0500, Stephen Smalley wrote:
> On Thu, 2005-02-10 at 12:32, David Hampton wrote:
> > Index: file_contexts/program/dovecot.fc
> >
> > +/var/spool/dovecot(/.*)? system_u:object_r:dovecot_data_t;
>
> No semicolon terminators in file contexts files. They are just newline
> delimited.
Thanks. (Boy do I feel silly.)
David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://www.redhat.com/archives/fedora-selinux-list/attachments/20050210/...
------------------------------
Message: 4
Date: Wed, 09 Feb 2005 18:13:33 -0600
From: Richard Jensen
Subject: Permissions for new users
To: fedora-selinux-list(a)redhat.com
Message-ID: <420AA72D.2010108(a)rhjensen.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi. I'm wondering about the permissions new users get
when they are created. Before SELinux I had to add users
to 'wheel' to enable them to su to root.
I did an adduser and it seems to be unrestricted:
[testse@lankhmar ~]$ id -Z
user_u:system_r:unconfined_t
and the user is able to su to root. Is this normal?
How would I keep the user from being able to su?
I added:
user testse roles { user_r };
to /etc/selinux/targeted/src/policy/users
and did: make load
This didn't seem to make any difference.
This is on FC3 (2.6.10-1.760_FC3)
selinux-policy-targeted-1.17.30-2.75
[root@lankhmar ~]# sestatus
SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: enforcing
Mode from config file: enforcing
Policy version: 18
Policy from config file:targeted
I'm not sure if this is clear, or enough information.
I tried searching the archives but didn't find anything.
[I may be searching incorrectly].
Thanks,
Richard.
------------------------------
Message: 5
Date: Thu, 10 Feb 2005 13:17:58 -0500
From: Colin Walters
Subject: execmem and targeted policy
To: fedora-selinux-list(a)redhat.com
Message-ID: <1108059478.6288.7.camel(a)nexus.verbum.private>
Content-Type: text/plain
Hi,
I noticed that as of a recent rawhide update that Eclipse stopped
working:
audit(1108057938.336:0): avc: denied { execmem } for pid=14065 comm=eclipse scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:unconfined_t tclass=process
Chatting with Dan, this is apparently because the execmem permission was
dropped from unconfined_domain recently.
We can't do this in targeted policy because it would require us to know
about (and specially label) all such programs. We could potentially
label /usr/bin/eclipse as unconfined_execmem_t or whatever since we have
Eclipse packages in Fedora. However, I am almost positive the Sun JVM
requires this permission too, and if we go this route, then every person
who untars the Sun JVM and tries to run Java programs will run into this
problem.
This is against the philosophy of the targeted policy in that it affects
programs outside of the targeted daemon set. My worry is that for every
person (like me) who tracks down this problem and finds a workaround,
there will be 999 others who disable SELinux entirely. And that's bad,
because we need it to be enabled by default so we can use it to confine
the programs that really need it.
(Dan says that textrel_shlib_t has a similar issue)
One approach might be to have e.g. bin_t and bin_nonexecmem_t. We label
programs that we know work as bin_nonexecmem_t.
------------------------------
Message: 6
Date: Thu, 10 Feb 2005 13:20:28 -0500
From: Stephen Smalley
Subject: Re: execmem and targeted policy
To: "Fedora SELinux support list for users & developers."
Message-ID: <1108059628.22172.162.camel(a)moss-spartans.epoch.ncsc.mil>
Content-Type: text/plain
On Thu, 2005-02-10 at 13:17, Colin Walters wrote:
> I noticed that as of a recent rawhide update that Eclipse stopped
> working:
>
> audit(1108057938.336:0): avc: denied { execmem } for pid=14065 comm=eclipse scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:unconfined_t tclass=process
>
> Chatting with Dan, this is apparently because the execmem permission was
> dropped from unconfined_domain recently.
>
> We can't do this in targeted policy because it would require us to know
> about (and specially label) all such programs.
It is controlled by a boolean. So simply enable the allow_execmem and
allow_execmod booleans by default in the targeted policy (via the
booleans config file). Or if you absolutely must unconditionally allow
it in targeted policy, put the allow rules in the targeted unconfined.te
file so that you don't affect the strict policy. But note that the
reason for subjecting these permissions to booleans even in the targeted
policy was that we were asked to do so by Ulrich (see the earlier
discussion on rhselinux-list).
--
Stephen Smalley
National Security Agency
------------------------------
Message: 7
Date: Thu, 10 Feb 2005 17:00:35 -0600
From: steve
Subject: Re: NAZI DATA
To: "Fedora SELinux support list for users & developers."
Message-ID: <200502101700.35460.w5set(a)alltel.net>
Content-Type: text/plain; charset="utf-8"
Sure--that info is readily available. Just march into the CIA Headquarters and
demand the info you need and site the Freedom of Information ACT. But they
will stall you forever, and try to read you another ACT, but I have heard
that most of the collaboration is being done on the CLONEHitler project. Or
was that the CLOWN HITLER project?
OHHHH--my mind is so fuzzy these days--YOU should recognize that symptom right
off. But thanks to modern medicine I am so much better these days--maybe you
should try some.
On a more realistic note, have you heard from ET lately? He hasn't called me
in months now.
And the csm at the end of your name---Do you work for Wal Mart? CSM there
stands for Customer Service Manager.
Almost Sincerely, Steve
On Thursday February 10 2005 09:48, kent mcclanahan wrote:
> Gentlemen,could you please inform me how to obtain data on Nazi involvement
> with the National Security Agency and The Central Intelligence Agency
> including names of the projects?Most Sincerely,Kent McClanahan csm
>
>
> ---------------------------------
> Do you Yahoo!?
> Meet the all-new My Yahoo! �� Try it today!
------------------------------
Message: 8
Date: Thu, 10 Feb 2005 17:25:35 -0600
From: steve
Subject: problems
To: "Fedora SELinux support list for users & developers."
Message-ID: <200502101725.35518.w5set(a)alltel.net>
Content-Type: text/plain; charset="us-ascii"
And ya'll think that having problems with such a mundane subject as Fedora
Core SELinux is a biggie, Kent obviously has much bigger (problem) fish to
fry.
About time I had a good laugh reading this email forum, but back to reality
and getting my server to run without any help from the Internet "assistants"
that stop often to help me by inputing code or something that trys to
overfill the buffers or evade detection by my router/firewalls. Ho-Hum.
--
.................steve w5set
------------------------------
Message: 9
Date: Fri, 11 Feb 2005 15:28:57 +0800
From: "Stephen Valenti"
Subject: Newbie to fedora/linux
To:
Message-ID: <001401c5100b$595c6800$0600000a@stephen>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
I was wondering if anybody could help.Im a real newbie at
linux and dont know much about it.I installed fedora core 3 with
\windows xp sp2.and am currently trying to get my speedtouch
adsl 530 modem to work but everytime I try create a folder to install
too it tells me "I cant create the folder I dont own the computer"
or something like that.I tried to find administration tools within fedora
but couldnt what am I doing wrong or do i need to re-install fedora
Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://www.redhat.com/archives/fedora-selinux-list/attachments/20050211/...
------------------------------
Message: 10
Date: Fri, 11 Feb 2005 12:20:51 +0100
From: dragoran
Subject: Re: execmem and targeted policy
To: "Fedora SELinux support list for users & developers."
Message-ID: <420C9513.20206(a)feuerpokemon.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Colin Walters wrote:
>Hi,
>
>I noticed that as of a recent rawhide update that Eclipse stopped
>working:
>
>audit(1108057938.336:0): avc: denied { execmem } for pid=14065 comm=eclipse scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:unconfined_t tclass=process
>
>Chatting with Dan, this is apparently because the execmem permission was
>dropped from unconfined_domain recently.
>
>We can't do this in targeted policy because it would require us to know
>about (and specially label) all such programs. We could potentially
>label /usr/bin/eclipse as unconfined_execmem_t or whatever since we have
>Eclipse packages in Fedora. However, I am almost positive the Sun JVM
>requires this permission too, and if we go this route, then every person
>who untars the Sun JVM and tries to run Java programs will run into this
>problem.
>
>This is against the philosophy of the targeted policy in that it affects
>programs outside of the targeted daemon set. My worry is that for every
>person (like me) who tracks down this problem and finds a workaround,
>there will be 999 others who disable SELinux entirely. And that's bad,
>because we need it to be enabled by default so we can use it to confine
>the programs that really need it.
>
>(Dan says that textrel_shlib_t has a similar issue)
>
>One approach might be to have e.g. bin_t and bin_nonexecmem_t. We label
>programs that we know work as bin_nonexecmem_t.
>
>
>--
>fedora-selinux-list mailing list
>fedora-selinux-list(a)redhat.com
>http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
>
>
>
mysqld has the same issues even in fc3 when running 2.6.11-rc3
http://www.redhat.com/archives/fedora-selinux-list/2005-February/msg00056...
------------------------------
Message: 11
Date: Fri, 11 Feb 2005 07:51:58 -0500
From: "ne..."
Subject: Re: Newbie to fedora/linux
To: "Fedora SELinux support list for users &, developers."
Message-ID:
Content-Type: text/plain; charset=US-ASCII
On Fri, 11 Feb 2005 15:28:57 +0800, Stephen Valenti
wrote:
>
> Hi,
> I was wondering if anybody could help.
Yep.
> what am I doing wrong or do i need to re-install fedora
Posting to the wrong group. You to join fedora-list and
post your problems there.
N.Emile...
--
Registered Linux User # 125653 (http://counter.li.org)
Certified: 75% bastard, 42% of which is tard.
http://www.thespark.com/bastardtest
Now accepting personal mail for GMail invites.
------------------------------
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
End of fedora-selinux-list Digest, Vol 12, Issue 11
***************************************************
---------------------------------
Do you Yahoo!?
Yahoo! Search presents - Jib Jab's 'Second Term'
19 years, 2 months
Re: fedora-selinux-list Digest, Vol 12, Issue 10
by kent mcclanahan
Dear P,the Nazi involvement in question is only coming to attention.Keep you ears open.Kent Mc.
fedora-selinux-list-request(a)redhat.com wrote:Send fedora-selinux-list mailing list submissions to
fedora-selinux-list(a)redhat.com
To subscribe or unsubscribe via the World Wide Web, visit
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
or, via email, send a message with subject or body 'help' to
fedora-selinux-list-request(a)redhat.com
You can reach the person managing the list at
fedora-selinux-list-owner(a)redhat.com
When replying, please edit your Subject line so it is more specific
than "Re: Contents of fedora-selinux-list digest..."
Today's Topics:
1. NAZI DATA (kent mcclanahan)
2. Re: NAZI DATA (Richard Irving)
3. Re: Today's targeted policy... (Stephen Smalley)
----------------------------------------------------------------------
Message: 1
Date: Thu, 10 Feb 2005 07:48:37 -0800 (PST)
From: kent mcclanahan
Subject: NAZI DATA
To: fedora-selinux-list(a)redhat.com
Message-ID: <20050210154837.76812.qmail(a)web50606.mail.yahoo.com>
Content-Type: text/plain; charset="us-ascii"
Gentlemen,could you please inform me how to obtain data on Nazi involvement with the National Security Agency and The Central Intelligence Agency including names of the projects?Most Sincerely,Kent McClanahan csm
---------------------------------
Do you Yahoo!?
Meet the all-new My Yahoo! � Try it today!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://www.redhat.com/archives/fedora-selinux-list/attachments/20050210/...
------------------------------
Message: 2
Date: Thu, 10 Feb 2005 11:54:24 -0500
From: Richard Irving
Subject: Re: NAZI DATA
To: "Fedora SELinux support list for users & developers."
Message-ID: <420B91C0.3070502(a)antient.org>
Content-Type: text/plain; charset=windows-1252; format=flowed
kent mcclanahan wrote:
> Gentlemen,could you please inform me how to obtain data on Nazi
> involvement with the National Security Agency and The Central
> Intelligence Agency including names of the projects?Most Sincerely,Kent
> McClanahan csm
The answer to those questions, and more, have been encoded
into the wrinkles in the aluminum foil beanie, you are now wearing.
Your challenge is to decode the message, without removing the
aluminum foil hat, and exposing yourself to the dreaded "mind rays".
Good Luck.
This message will self destruct, shortly after you hit delete.
:P
(ROTFLMAO!)
> ------------------------------------------------------------------------
> Do you Yahoo!?
> Meet the all-new My Yahoo! � Try it today!
>
>
> ------------------------------------------------------------------------
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list(a)redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
------------------------------
Message: 3
Date: Thu, 10 Feb 2005 11:48:55 -0500
From: Stephen Smalley
Subject: Re: Today's targeted policy...
To: Tom London , "Fedora SELinux support list for
users & developers."
Message-ID: <1108054135.22172.90.camel(a)moss-spartans.epoch.ncsc.mil>
Content-Type: text/plain
On Thu, 2005-02-10 at 10:23, Tom London wrote:
> Running targeted/enforcing, latest rawhide.
>
> After installing today's policy files and rebooting, had X/execmem
> problems. Solved by 'setsebool -P allow_execmem 1'.
>
> Rebooting produces scads of use and sigchild denials. Attached is
> /var/log/messages.
>
> In the past, use/fd denials were usually due to leaky file descriptors
> across execs. That likely the case here? Not sure about sigchild....
No, I removed rules from the general unconfined_domain() macro that
shouldn't be applied to _all_ unconfined domains, and no one has yet
added them back to the specific unconfined.te file in the targeted
policy (which is the only place they were needed). In the targeted
policy, all other domains are launched from the unconfined_t domain, and
these rules used to be covered by the domain_auto_trans rules, but the
re-introduction of initrc_t into the targeted policy means that they
have to be separately allowed. So the allow domain unconfined_t:fd use;
allow domain unconfined_t:process sigchld; rules need to go into the
targeted unconfined.te file.
--
Stephen Smalley
National Security Agency
------------------------------
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
End of fedora-selinux-list Digest, Vol 12, Issue 10
***************************************************
---------------------------------
Do you Yahoo!?
Yahoo! Search presents - Jib Jab's 'Second Term'
19 years, 2 months
Newbie to fedora/linux
by Stephen Valenti
Hi,
I was wondering if anybody could help.Im a real newbie at
linux and dont know much about it.I installed fedora core 3 with
\windows xp sp2.and am currently trying to get my speedtouch
adsl 530 modem to work but everytime I try create a folder to install
too it tells me "I cant create the folder I dont own the computer"
or something like that.I tried to find administration tools within fedora
but couldnt what am I doing wrong or do i need to re-install fedora
Steve
19 years, 2 months
execmem and targeted policy
by Colin Walters
Hi,
I noticed that as of a recent rawhide update that Eclipse stopped
working:
audit(1108057938.336:0): avc: denied { execmem } for pid=14065 comm=eclipse scontext=user_u:system_r:unconfined_t tcontext=user_u:system_r:unconfined_t tclass=process
Chatting with Dan, this is apparently because the execmem permission was
dropped from unconfined_domain recently.
We can't do this in targeted policy because it would require us to know
about (and specially label) all such programs. We could potentially
label /usr/bin/eclipse as unconfined_execmem_t or whatever since we have
Eclipse packages in Fedora. However, I am almost positive the Sun JVM
requires this permission too, and if we go this route, then every person
who untars the Sun JVM and tries to run Java programs will run into this
problem.
This is against the philosophy of the targeted policy in that it affects
programs outside of the targeted daemon set. My worry is that for every
person (like me) who tracks down this problem and finds a workaround,
there will be 999 others who disable SELinux entirely. And that's bad,
because we need it to be enabled by default so we can use it to confine
the programs that really need it.
(Dan says that textrel_shlib_t has a similar issue)
One approach might be to have e.g. bin_t and bin_nonexecmem_t. We label
programs that we know work as bin_nonexecmem_t.
19 years, 2 months
problems
by Steve Thacker
And ya'll think that having problems with such a mundane subject as Fedora
Core SELinux is a biggie, Kent obviously has much bigger (problem) fish to
fry.
About time I had a good laugh reading this email forum, but back to reality
and getting my server to run without any help from the Internet "assistants"
that stop often to help me by inputing code or something that trys to
overfill the buffers or evade detection by my router/firewalls. Ho-Hum.
--
.................steve w5set
19 years, 2 months
NAZI DATA
by kent mcclanahan
Gentlemen,could you please inform me how to obtain data on Nazi involvement with the National Security Agency and The Central Intelligence Agency including names of the projects?Most Sincerely,Kent McClanahan csm
---------------------------------
Do you Yahoo!?
Meet the all-new My Yahoo! � Try it today!
19 years, 2 months
"invalid contex" question
by David Hampton
I'm running an FC3 system with the latest rawhide strict policy. I'm
currently trying to tweak the dovecot files for my system and am running
into an invalid context error. My changes so far:
Index: domains/program/dovecot.te
+type dovecot_data_t, file_type, sysadmfile;
+create_dir_file(dovecot_t, dovecot_data_t)
Index: file_contexts/program/dovecot.fc
+/var/spool/dovecot(/.*)? system_u:object_r:dovecot_data_t;
The problem is that after a 'make reload' when I try to relabel
the /var/spool/dovecot directory, I get the error message:
/etc/selinux/strict/contexts/files/file_contexts: line 999 has invalid
context system_u:object_r:dovecot_data_t;
Doing a 'make install' in the policy directory gives me this same error.
Is there something else I need to do to create this new type?
Thanks.
David
19 years, 2 months
