tomhurd
Re:SELinux, Seccomp, Falco, and You: A Technical Discussion
on Saturday December 10, 2016 @07:26AM (#13145353)
> SELinux as a whole is binary: either it is on or off. You can't run a specific program as unconfined, generate a policy from the errors, and enable it after a while.
You can make individual domains permissive with the overall system in enforcing. It's available in RHEL6 and RHEL7, I'm not sure about RHEL5.
"semanage permissive -a httpd_t"
Re:NSA 2014 Technology Catalog – Tech Transfer Program [pdf]
on Wednesday May 06, 2015 @06:47PM (#9502266)
I cringed when I read that one