FC6 SELinux issues

Gene Czarcinski gene at czarc.net
Sun Oct 8 19:32:04 UTC 2006


On Thursday 05 October 2006 10:29, Daniel J Walsh wrote:
> MLS Policy is a server only policy.  IE We don not support X-Windows.  
> So if you want to change to MLS you need to remove all X-Windows
> software and relabel.  Then it should work, but you need to understand
> how an MLS environment works.

OK, I have setup something I consider to be server oriented (no X).  I get a 
bunch of avc denied messages (permissive mode).

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209950

>
> Strict policy is not heavily tested in Fedora.  Most people run
> targeted.  We will look at any problems that you have with it, though.

Most of the problems in mls mode seem to be the same in strict mode.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209949

I assume that strict mode should be capable of running X ... true or false?
-- 
Gene




More information about the fedora-selinux-list mailing list