Relabelling
by mark
Ok, folks,
We've got a really important server on our network - it's a loghost,
runs dibbler, etc. We had a grub issue, and now, trying to come up,
it's taken over half an hour on relabelling... and this is a 1TB (RAID
1) drive, and not more than about a quarter full.
This is not acceptable - even with fsck, you can tell it fastboot. What
reasonable and customary practice should we follow to prevent this very
long behaviour? Would have a cron job run restortcon -R / once a month
help? If not, what else is there?
mark
7 years, 4 months
user based access control
by Jeff Becker
Hi. I successfully compiled and loaded the following policy file on RHEL7
with the latest (as of yesterday) SELinux rpms. However, when I run "seinfo
-tfoo_t -x", I don't see ubac_constrained_type listed in the attributes.
How do I enable UBAC? Thanks.
-jeff
--------------------------------------------------------------------------------------------------------------------------------------------------------------
policy_module(foo, 1.0.0)
########################################
#
# Declarations
#
userdom_unpriv_user_template(foo)
########################################
#
# foo local policy
#
domain_use_interactive_fds(foo_t)
files_read_etc_files(foo_t)
miscfiles_read_localization(foo_t)
ubac_constrained(foo_t)
7 years, 4 months