On Tue, 2009-04-21 at 12:31 +0100, Tony Molloy wrote:
Hi,
If I have a top level non default directory say for argument called /data. This directory contains various scripts and text files which should be available to everyone. Now when I do an install it gets the default selinux context file_t. But this generates lots of AVC's if I set selinux to enforcing. What should I label this directory as.
Regards,
Tony
Depends on what you want to use it for. For example you can label it root_t if you want to put in folders that resemble /var or /etc or /home/user etc.
You can also label /data var_t if that it what you will use it for.
Or you can for example label /data user_home_t if you want to store user_content there.
It just depends on how you will use /data.
-/data(root_t)---/user_content(user_home_t) -/var(var_t) -/etc(etc_t) -/custom(some_custom_type_t) - etcetc
for example: if you want to store web content in /data you would label it httpd_sys_content_t (just like /var/www is labeled that type)