[OT] tmpfs - was : AVC every server boot: SELinux is preventing the setxkbmap from using potentially mislabeled files (./.X11-unix).

Daniel J Walsh dwalsh at redhat.com
Tue Aug 18 21:15:35 UTC 2009


On 08/15/2009 07:50 PM, Shintaro Fujiwara wrote:
> Hello.
> 
>> I am on a personal crusade to stop all system services (processes running as UID=0) from using /tmp. /var/tmp
> 
> I'm interested in this topic but I don't know how to find processes
> running as UID=0 using /tmp or /var/tmp.
> 
> Thanks in advance.
> 
> 

There is no good way other then grep.  But any time I see a domain asking for tmp_t in SELinux I always suggest to the developers to use /var/run instead.  




More information about the fedora-selinux-list mailing list