3 ms·
audit2allow and friends have really come a long way since SELinux's introduction. I have a RHEL7 virtual machine running a node app and it works really well. If
by TD-Linux 12y ago
audit2allow and friends have really come a long way since SELinux's introduction. I have a RHEL7 virtual machine running a node app and it works really well. If permission is denied for something, I just look at the audit log to see if it was selinux's fault, then audit2allow will either tell me what permission I need to turn on, or give me a custom rule to allow that behavior.
- lmz 12y agoDoes audit2allow suggest appropriate labels e.g. "this file cannot be written to. ...._t might be a more appropriate label for it" ?
- Ded7xSEoPKYNsDd 12y agoBasically, yes: #!!!! The source type 'munin_t' can write to a 'dir' of the following types: # tmp_t, etc_t, munin_tmp_t, munin_log_t, var_run_t, var_log_t, munin_var_lib_t, munin_var_run_t, httpd_munin_content_t, root_t
- nodata 12y agoYes.