[Discuss] selinux nightmare

[Chuck Anderson]

On Mon, Sep 29, 2014 at 10:59:49AM +0000, Edward Ned Harvey (blu) wrote:
> > From: discuss-bounces+blu=nedharvey.com at blu.org [mailto:discuss-
> > bounces+blu=nedharvey.com at blu.org] On Behalf Of Stephen Adler
> > 
> > rtfming.... So... can anyone suggest a good selinux for dummies web site
> 
> A couple years ago, I read the selinux book and all the man pages, and wrote this very simple summary as a result:
> http://nedharvey.com/blog/?p=12
> 
> There's really only one thing missing from it.  "man setsebool"

Creating a local policy module to allow whataver is being blocked
should be the last resort.

As Dan points out in his blog many times over, SELinux is all about
Labels.  So first you should check if your files have the right
labels:

https://danwalsh.livejournal.com/64142.html