Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
user_exec_content for SELinux
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Captain Kirk
Tux's lil' helper
Tux's lil' helper


Joined: 16 Apr 2003
Posts: 146
Location: USA

PostPosted: Tue Apr 10, 2018 2:33 am    Post subject: user_exec_content for SELinux Reply with quote

I'm evaluating rolling out Gentoo with SELinux. I was really hoping the base policy would include the user_exec_content boolean, forbidding users from executing content in /home and /tmp. Alas, while this boolean is in RHEL/CentOS - it isn't in Gentoo. I tried drafting my own local policy with a "neverallow" denying exec, but it either won't compile or load.

Has anyone done this type of policy change; is it possible to amend the base policy in this way?

(I realize I could mount /home noexec, but I do want "admin" (staff_t) users to be able to exec content.)
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum