selinux-policy-targeted

Matej Cepl mcepl at redhat.com
Fri Mar 14 11:58:19 UTC 2008


On 2008-03-13, 22:27 GMT, Daniel J Walsh wrote:
> Yes it should work, you should never setup a service account 
> with a login shell.

Well, it depends on your definition of the service account. I had 
these problems with user news, which has home dir 
/var/spool/news, context news_spool_t, but I wanted to make 
procmail working for that user (because of mail2news gateway).
I had to create SELinux module with audit2allow to enable 
procmail writing to the logfile in ~news.

Matej




More information about the devel mailing list