diff options
| author |  Topi Miettinen <toiwoton@gmail.com> | 2020-02-18 20:38:00 +0200 |
|---|---|---|
| committer |  Topi Miettinen <topimiettinen@users.noreply.github.com> | 2020-02-22 08:27:24 +0000 |
| commit | 1ad2d54c014a49f6ad0b487dd0d9b361cb4d299e (patch) | |
| tree | 415eb19d90e2ed1de7236c784c1e28d3acfbcaab /README.md | |
| parent | Whitelist more /usr/share for okular and others (diff) | |
| download | firejail-1ad2d54c014a49f6ad0b487dd0d9b361cb4d299e.tar.gz firejail-1ad2d54c014a49f6ad0b487dd0d9b361cb4d299e.tar.zst firejail-1ad2d54c014a49f6ad0b487dd0d9b361cb4d299e.zip | |
Add support for SELinux labeling
Running `firejail --noprofile --private-bin=bash,ls ls -1Za /usr/bin`
shows that the SELinux labels are not correct:
```
user_u:object_r:user_tmpfs_t:s0 .
system_u:object_r:usr_t:s0 ..
user_u:object_r:user_tmpfs_t:s0 bash
user_u:object_r:user_tmpfs_t:s0 ls
```
After fixing this:
```
system_u:object_r:bin_t:s0 .
system_u:object_r:usr_t:s0 ..
system_u:object_r:shell_exec_t:s0 bash
system_u:object_r:bin_t:s0 ls
```
Most copied files and created directories should now have correct
labels (bind mounted objects keep their labels). This is useful to
avoid having to change the SELinux rules when using Firejail.
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 2 |
1 files changed, 1 insertions, 1 deletions
| @@ -87,7 +87,7 @@ development libraries and pkg-config are required when using --apparmor | |||
| 87 | ````` | 87 | ````` |
| 88 | $ sudo apt-get install git build-essential libapparmor-dev pkg-config | 88 | $ sudo apt-get install git build-essential libapparmor-dev pkg-config |
| 89 | ````` | 89 | ````` |
| 90 | 90 | For --selinux option, add libselinux1-dev (libselinux-devel for Fedora). | |
| 91 | 91 | ||
| 92 | ## Running the sandbox | 92 | ## Running the sandbox |
| 93 | 93 | ||