September 2014
Intermediate to advanced
240 pages
5h 53m
English
Finally, before testing the policy, we need to create a role interface and assign it to the user domain that will be used to test (and run) the application. If we don't create a role interface and assign it to a user domain, then the user domain will either have no privileges to execute the application at all, or the application will run with the user context rather than the newly defined skype_t domain. If the user domain isn't unconfined, then chances are that the application will fail.
Role interfaces are the gateways of a policy. They ensure that domains and SELinux users can interact with the application and that the set of privileges for a particular application are coherent.
We create such ...
Read now
Unlock full access