Need help to change selinux mls policy range with correct steps
i install selinux on my os to provide more security , i work wit policy mls i want to change my selinux policy mls level and range , i followed the manual pages to use:
# sudo semanage user
# sudo semanage login
# sudo runcon
i succeded to change the mls level and range but i face the probleme in the end that my user login not have a valid context it changed from user_r to system_u i try to find why this happen and which mistake i did here the output of my semanage user -l
root sysadm s0 s0-s15:c0.c1023 auditadm_r staff_r secadm_r sysadm_r system_r
staff_u staff s0 s0-s15:c0.c1023 auditadm_r staff_r secadm_r sysadm_r
sysadm_u sysadm s0 s0-s15:c0.c1023 sysadm_r
system_u user s0 s0-s15:c0.c1023 system_r
unconfined_u unconfined s0 s0-s15:c0.c1023 system_r unconfined_r
user_u user s0 s0-s15:c0.c1023 user_r
I changed the all account above plus my login range i run after
#sudo genhomedircon
# sudo touch /.autorelabel
# sudo reboot
But i arrive in the end with invalid id -Z its changed from user_r to system_u and there is no relabel with new level and ranges any suggestions
|