node contexts

Andy Ruch adruch2002 at yahoo.com
Wed Nov 21 17:31:59 UTC 2012


Hello,

I'm setting up a system where the nodes need to have different types. Currently, I'm getting an AVC denial for a node but I don't know which node. 

My questions:

1) Is it possible to know which node an AVC message is referencing?

2) Is there a way to see all the node contexts? I know "semanage node -l" will show my local nodecon modifications but how do I list all the nodes?

3) I tried to add a "nodecon" statement to the corenetwork.te file but the policy won't compile. How can I label a node from the policy? Here is what I tried:
        type my_lo_node_t;
        corenet_node( my_lo_node_t )
        nodecon 127.0.0.1 255.255.255.255 gen_context(system_u:object_r:my_lo_node_t, s0)
     
 
Thanks,
Andy Ruch


More information about the selinux mailing list