Re: label

Casper <[email protected]> Mon, 13 Feb 2023 20:27:28 +0100
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <[email protected]>
Henry Zhang a écrit :
>    Hi,
>    I want to do custom SELinux with policies.
>    The first challenge I am facing is to check if the label is correct or not
>    instead of using audit2allow first.
>    How do I know if labeling is correct in a denied message from
>    /var/log/audit.log?

restorecon -v /path/to/file

If it returns nothing, it means label was correct in the first
place. If label is not correct, restorecon will fix it.

-- 
GnuPG: AE157E0B29F0BEF2 at keys.openpgp.org
CA Cert: https://dl.casperlefantom.net/pub/ssl/root.der
Jabber/XMPP Messaging: [email protected]

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
signature.asc (application/pgp-signature, 870 B)
-----BEGIN PGP SIGNATURE-----
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=xjGT
-----END PGP SIGNATURE-----