On Thu, Nov 2, 2023 at 6:18 PM lejeczek <peljasz(a)yahoo.co.uk> wrote:
Hi guys.
I wonder if someone might have seen _cobbler_ trying to claim this.
I've tried a few sebools but regardless SELinux denies cobbler:
#============= cobblerd_t ==============
allow cobblerd_t self:capability dac_override;
and from what I gather _dac_override_ is pretty big thing and I wonder if
_cobbler_ should have it.
Hi,
If you can reproduce it, use one of the debugging option to find out access
to which file triggers it:
https://fedoraproject.org/wiki/SELinux/Debugging#Enable_full_auditing
many thanks, L.
_______________________________________________
selinux mailing list -- selinux(a)lists.fedoraproject.org
To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject...
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
--
Zdenek Pytela
Security SELinux team