Re: unconfined_t

[Stephen Smalley]

On Fri, 2005-09-09 at 12:24 -0400, Ma. Alejandra Castillo wrote:
> Dear all,
>
> i have a question for you, when i execute the comand id -Z  for
> example:
>
> id -Z for the users root i obtain this output
>  root:system_r:unconfined_t
> id -Z for the user mai  user_u:system_r:unconfined_t
>
> and the same happens with all the users that i have created.
>
> why does it appear as unconfined_t??
> how can y change this?

By default, Fedora uses a "targeted" policy that only confines specific
daemons and not users.  The original policy (called "strict") is also
available as an option, but you have to install it and switch over to
it.  See the Fedora SELinux FAQ,
http://fedora.redhat.com/docs/selinux-faq-fc3/