4 ms·
One compromise to consider is using the unconfined domain (unconfined_t) to offer a more flexible arrangement. Of course this won't help you in a compliance sit
by sysadmindotfail 10y ago
One compromise to consider is using the unconfined domain (unconfined_t) to offer a more flexible arrangement. Of course this won't help you in a compliance situation (like PCI/RMF/NIST) but it's worth considering.
https://wiki.gentoo.org/wiki/SELinux/Tutorials/What_is_this_unconfined_thingie_and_tell_me_about_attributes https://wiki.gentoo.org/wiki/SELinux/Tutorials/What_is_this_...