golden hour

/usr/lib/python3.9/site-packages/sepolicy/help

⬆️ Go Up

Upload

File/Folder	Size	Actions
__init__.py	0 B	Del OK
__pycache__	-	Del OK
booleans.png	71.04 KB	Del OK
booleans.txt	478 B	Del OK
booleans_more.png	60.89 KB	Del OK
booleans_more.txt	193 B	Del OK
booleans_more_show.png	34.13 KB	Del OK
booleans_more_show.txt	62 B	Del OK
booleans_toggled.png	60.51 KB	Del OK
booleans_toggled.txt	310 B	Del OK
file_equiv.png	48.07 KB	Del OK
file_equiv.txt	1.15 KB	Del OK
files_apps.png	80.06 KB	Del OK
files_apps.txt	563 B	Del OK
files_exec.png	66.28 KB	Del OK
files_exec.txt	398 B	Del OK
files_write.png	75.95 KB	Del OK
files_write.txt	567 B	Del OK
lockdown.png	49.41 KB	Del OK
lockdown.txt	291 B	Del OK
lockdown_permissive.png	29.32 KB	Del OK
lockdown_permissive.txt	722 B	Del OK
lockdown_ptrace.png	28.65 KB	Del OK
lockdown_ptrace.txt	1.22 KB	Del OK
lockdown_unconfined.png	26.83 KB	Del OK
lockdown_unconfined.txt	867 B	Del OK
login.png	39.16 KB	Del OK
login.txt	786 B	Del OK
login_default.png	40.7 KB	Del OK
login_default.txt	507 B	Del OK
ports_inbound.png	57.61 KB	Del OK
ports_inbound.txt	336 B	Del OK
ports_outbound.png	51.74 KB	Del OK
ports_outbound.txt	346 B	Del OK
start.png	13.8 KB	Del OK
start.txt	505 B	Del OK
system.png	49.42 KB	Del OK
system.txt	81 B	Del OK
system_boot_mode.png	51.44 KB	Del OK
system_boot_mode.txt	458 B	Del OK
system_current_mode.png	51.41 KB	Del OK
system_current_mode.txt	344 B	Del OK
system_export.png	51.96 KB	Del OK
system_export.txt	416 B	Del OK
system_policy_type.png	53.35 KB	Del OK
system_policy_type.txt	410 B	Del OK
system_relabel.png	51.63 KB	Del OK
system_relabel.txt	399 B	Del OK
transition_file.png	68.14 KB	Del OK
transition_file.txt	1.03 KB	Del OK
transition_from.png	61.75 KB	Del OK
transition_from.txt	619 B	Del OK
transition_from_boolean.png	65.75 KB	Del OK
transition_from_boolean.txt	463 B	Del OK
transition_from_boolean_1.png	70.04 KB	Del OK
transition_from_boolean_1.txt	235 B	Del OK
transition_from_boolean_2.png	31.46 KB	Del OK
transition_from_boolean_2.txt	132 B	Del OK
transition_to.png	57.53 KB	Del OK
transition_to.txt	605 B	Del OK
users.png	56.27 KB	Del OK
users.txt	814 B	Del OK

Edit: file_equiv.txt

SELinux can either setup labeling directory using the Application/files screen, or you can setup file equivalence. File Equivalence allows an administrator to label entire directory trees as the same way as the Equivalence directory tree. Use Case 1: An administrator want to store his Apache root content in a location other then /var/www like /srv/www. He could define an equivalence between /srv/www and /var/www. libselinux reads the equivalence rules and does the substitution when ever the matchpathcon function is called. Tools like restorecon/rpm/udev and others will all follow the substitution. Using the example above when matchpathcon is handed /srv/www/cgi-bin/myscript.cgi, it substitutes /var/www for /svr/www and looks up the context of /var/www/cgi-bin/myscript.cgi. In the command line you could execute. # semanage fcontext -a -e /var/www /srv/www Another common case where you might want to use file equivalence, is if you put your users home directories in a location other then /home. If you setup an equivalence between /home and /export/home # matchpathcon /export/home/dwalsh/.ssh /export/home/dwalsh/.ssh unconfined_u:object_r:home_ssh_t:s0
Save