Blame policy/modules/roles/unconfineduser.fc
|
Dan Walsh |
3eaa99 |
# Add programs here which should not be confined by SELinux
|
|
Dan Walsh |
3eaa99 |
# e.g.:
|
|
Dan Walsh |
3eaa99 |
# /usr/local/bin/appsrv -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
Dan Walsh |
3eaa99 |
# For the time being until someone writes a sane policy, we need initrc to transition to unconfined_t
|
|
Dan Walsh |
3eaa99 |
/usr/bin/vncserver -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
Dan Walsh |
3eaa99 |
|
|
Dan Walsh |
3eaa99 |
/usr/sbin/xrdp -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|
|
Dan Walsh |
3eaa99 |
/usr/sbin/xrdp-sesman -- gen_context(system_u:object_r:unconfined_exec_t,s0)
|