diff options
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -51,7 +51,7 @@ append `security=selinux` to the kernel command line `echo '-FM' > /.autorelabel && reboot` -*Labeling is to most tricky part of SELinux and if you use `Btrfs` with subvolumes then you may want to pay special attention to it* +*Labeling is the most tricky part of SELinux and if you use `Btrfs` with subvolumes then you may want to pay special attention to it* You can find any unlabeled and mislabeled content by running: @@ -70,10 +70,10 @@ Edit any one of them then load it back into the module store. Your version will Start adding your policy: -`echo '(type myfirsttype)' > myfirsttype.cil && semodule -i myfirsttype.cil` -`seinfo -t myfirstype` +* `echo '(type myfirsttype)' > myfirsttype.cil && semodule -i myfirsttype.cil` +* `seinfo -t myfirsttype` -The DSSP5 `misc.cil` module is used to correspond GNU/Linux aspects to Debian specifics. For example it associates the `sys.id:sys.role:conf.file:s0` context with `/etc`. Because DSSP5 aims to be easily adjustable to any GNU/Linux distribution. It is just that Debian is used as the development platform for DSSP5. +The DSSP5 `misc.cil` module is used to correspond GNU/Linux aspects with Debian specifics. For example it associates the `sys.id:sys.role:conf.file:s0` label with `/etc` because DSSP5 aims to be easily adjustable to any GNU/Linux distribution. It is just that Debian is used as the development platform for DSSP5 and `misc.cil` is what glues the two together. **The art to success is planning. Work in small self contained increments. That way you should be able to end the day with SELinux enforcing just as you started the day.** |