SELinux

[Ed Greshko]

 On 08/30/2010 04:30 PM, mike cloaked wrote:
> On Mon, Aug 30, 2010 at 1:18 AM, Patrick Dupre <pd520 at york.ac.uk> wrote:
>
>>> Try:
>>>
>>> chcon -t texrel_shlib_t \
>>>  /usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so
>>>
>> OK, it works for Errno.so, but I have to do it all the files of the
>> package !
> You can set context for all the files in a directory (such as
> /usr/local/lib/perl5/auto/Math/GSL ) by doing:
> semanage fcontext -a -t textrel_shlib_t
> '/usr/local/lib/perl5/auto/Math/GSL(/.*)?'
> then
> restorecon -vR /usr/local/lib/perl5/auto/Math/GSL
>
> This will then allow you to set that context in all the files if they
> change in the future by repeating the restorecon command.
> Also the files will have their contexts correctly reset after an
> autorelabel as well.
>
> I would strongly suggest that you read the selinux guide.
>

Another thing to do would be to google "customizing selinux policy" (or
similar words/phrase) and then create a local policy.

Someplace like http://wiki.centos.org/HowTos/SELinux is a good start.


-- 
Earth is a beta site. 葛斯克 愛德華 / 台北市八德路四段

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20100830/3d4d0d72/attachment.bin