How best get rid of SELinux?

Arthur Pemberton pemboa at gmail.com
Sun Sep 23 06:11:49 UTC 2007


On 9/23/07, Tim <ignored_mailbox at yahoo.com.au> wrote:
> On Sat, 2007-09-22 at 18:00 +0000, Beartooth wrote:
> > And thereby hangs an old sad tale. I looked at that -- and found
> > it utterly incomprehensible.
>
> I think the naming of the contexts, themselves, were a really bad
> incomprehensible thing.
>
> Looking in my home space, things have: user_u:object_r:user_home_t
>
> What's a user_u, or object_r, or user_home_t?
>
> Or a PNG file in my webserver directory:
> user_u:object_r:httpd_sys_content_t
>
> They're not at all intuitive.  What's a "u," "r," or "t"?  I've no
> choice but to read a manual to work that out, I couldn't even guess at
> it.  But a quick look through a few of the SELinux manuals doesn't
> explain what any of it means.

It takes less that a minute to find out 'man chcon'' :
http://linux.die.net/man/1/chcon

u -> user
r -> role
t -> type

Manual modification of the security contexts aren't really expected of
most people.

-- 
Fedora 7 : sipping some of that moonshine
( www.pembo13.com )




More information about the users mailing list