avc: denied { ioctl }?

[Russell Coker]

On Thursday 09 June 2005 00:28, "Hongwei Li" <hongwei at wustl.edu> wrote:
> Another question.  I installed selinux-policy-targeted-sources.  However, I
> could not find local.te under domains/misc.  What I see under domain are:

The point of the name "local.te" is that it will NEVER be used by any package 
or distribution of policy source.  So if you have not created such a file 
then it should not exist.

Another name reserved for the same purpose is "custom.te" (which I have used 
in examples of how to write policy).

When writing your own policy additions you should avoid using any name that 
might be used by the system.  If you have a name conflict then you risk 
losing your changes on an upgrade.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page