mirror of
https://github.com/rustdesk/doc.rustdesk.com.git
synced 2025-06-02 07:55:49 +02:00
selinux
Signed-off-by: fufesou <shuanglongchen@yeah.net>
This commit is contained in:
parent
b54fdc5314
commit
df7d58e5c8
@ -133,6 +133,8 @@ In this example, this file mainly comes from 3 parts:
|
|||||||
2. Audit log, `grep rustdesk /var/log/audit/audit.log | audit2allow -a -M test`.
|
2. Audit log, `grep rustdesk /var/log/audit/audit.log | audit2allow -a -M test`.
|
||||||
3. The test system's `init_t` policy, `sesearch -A | grep 'allow init_t ' | sed 's/allow init_t /allow rustdesk_t /g'`.
|
3. The test system's `init_t` policy, `sesearch -A | grep 'allow init_t ' | sed 's/allow init_t /allow rustdesk_t /g'`.
|
||||||
|
|
||||||
|
Some policies are duplicates and some are redundant, but this is ok since it works on rustdesk_t.
|
||||||
|
|
||||||
The contents of each file are as follows.
|
The contents of each file are as follows.
|
||||||
|
|
||||||
rustdes.te:
|
rustdes.te:
|
||||||
|
@ -133,6 +133,8 @@ $ sudo semodule -l | grep rustdesk
|
|||||||
2. audit 日志,`grep rustdesk /var/log/audit/audit.log | audit2allow -a -M test`。
|
2. audit 日志,`grep rustdesk /var/log/audit/audit.log | audit2allow -a -M test`。
|
||||||
3. 测试系统的 `init_t` 策略,`sesearch -A | grep 'allow init_t ' | sed 's/allow init_t /allow rustdesk_t /g'`。
|
3. 测试系统的 `init_t` 策略,`sesearch -A | grep 'allow init_t ' | sed 's/allow init_t /allow rustdesk_t /g'`。
|
||||||
|
|
||||||
|
一些策略是重复的,一些策略是多余的,但这是可以接受的,因为它对 rustdesk_t 起作用。
|
||||||
|
|
||||||
各个文件内容如下。
|
各个文件内容如下。
|
||||||
|
|
||||||
rustdes.te:
|
rustdes.te:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user