News for hackers. Stuff that matters.
Re:SELinux, Seccomp, Falco, and You: A Technical Discussion by otterley on Saturday December 10, 2016 @03:51PM (#13147836)
> You can't run a specific program as unconfined, generate a policy from the errors, and enable it after a while.

You absolutely can. SELinux reports errors to the audit log, then you can run audit2allow(1) to find out why the error occurred and how to fix it. See, e.g., https://access.redhat.com/documentation/en-US/Red_Hat_Enterp...

There are no comments on this comment yet.