Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Hardware > Linux - Embedded & Single-board computer
User Name
Linux - Embedded & Single-board computer This forum is for the discussion of Linux on both embedded devices and single-board computers (such as the Raspberry Pi, BeagleBoard and PandaBoard). Discussions involving Arduino, plug computers and other micro-controller like devices are also welcome.


  Search this Thread
Old 12-21-2021, 06:34 AM   #1
LQ Newbie
Registered: Jul 2018
Posts: 15

Rep: Reputation: Disabled
SELinux: allow line for any application

It's possible to write for SELinux an allow line for every application?

I.e. I am working on a Linux embedded distro and many applications need to explicitly allowed to make use of the pseudoterminal:

allow application_name devpts_t:chr_file { read write };
The process of finding any app that does not have this access is very tedious and has to be repeated for any new application... Any way to write just one line of devpts_t:chr_file rw access instead of doing it in several different policies?
Old 12-21-2021, 08:28 AM   #2
Senior Member
Registered: Mar 2020
Posts: 3,667

Rep: Reputation: Disabled
What domain are all those processes running in? unconfined_t? Wouldn't it be a matter of
allow unconfined_t devpts_t:chr_file { read write };

Last edited by shruggy; 12-21-2021 at 09:38 AM.
1 members found this post helpful.
Old 12-21-2021, 02:30 PM   #3
Registered: Sep 2005
Distribution: debian, linux from scratch
Posts: 190

Rep: Reputation: 51
Another option would be to disable SElinux.
Old 12-21-2021, 08:23 PM   #4
Registered: Mar 2021
Posts: 58

Rep: Reputation: Disabled
Originally Posted by hoes View Post
Another option would be to disable SElinux.
There are some security hardening requirements that dictate SELinux should be enabled. It is up to the individual Systems Administrators to determine what to allow or deny in SELinux.



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
postfix and selinux [selinux updates broke postfix?] rjcroasdale Linux - Server 59 12-04-2019 12:17 AM
[SOLVED] kdiff3 doesn't allow me to compare line by line, any alternatives? Aquarius_Girl Linux - Software 7 03-03-2011 06:33 PM
SELinux errors, SELinux and wine ziphem Linux - Security 10 01-27-2011 05:15 PM
Selinux-how do i find out what domains have permissions on what type?(selinux policy) vishyc88 Linux - Security 2 11-22-2010 05:27 AM
"../system.h :selinux/selinux.h:no such file or directory" ashmita04 Linux From Scratch 4 02-05-2009 04:36 AM > Forums > Linux Forums > Linux - Hardware > Linux - Embedded & Single-board computer

All times are GMT -5. The time now is 12:06 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration