On 9/23/07, Tim <ignored_mailbox@xxxxxxxxxxxx> wrote: > On Sat, 2007-09-22 at 18:00 +0000, Beartooth wrote: > > And thereby hangs an old sad tale. I looked at that -- and found > > it utterly incomprehensible. > > I think the naming of the contexts, themselves, were a really bad > incomprehensible thing. > > Looking in my home space, things have: user_u:object_r:user_home_t > > What's a user_u, or object_r, or user_home_t? > > Or a PNG file in my webserver directory: > user_u:object_r:httpd_sys_content_t > > They're not at all intuitive. What's a "u," "r," or "t"? I've no > choice but to read a manual to work that out, I couldn't even guess at > it. But a quick look through a few of the SELinux manuals doesn't > explain what any of it means. It takes less that a minute to find out 'man chcon'' : http://linux.die.net/man/1/chcon u -> user r -> role t -> type Manual modification of the security contexts aren't really expected of most people. -- Fedora 7 : sipping some of that moonshine ( www.pembo13.com )