SELinux files in "/etc/selinux/targeted/contexts/files" getting unconfined : spooky or BAU?

Latest response

Hi to the Red Hat community,

Running AIDE, I noticed that a number of SELinux files located in the "/etc/selinux/targeted" have been changed in the following way :


 SELinux  : system_u:object_r:file_context_t:s0 | unconfined_u:object_r:file_context_t:s0

The list of changed files is the following :
f ... ..S : /etc/selinux/targeted/contexts/files/file_contexts
f ... ..S : /etc/selinux/targeted/contexts/files/file_contexts.bin
f ... ..S : /etc/selinux/targeted/contexts/files/file_contexts.homedirs
f ... ..S : /etc/selinux/targeted/contexts/files/file_contexts.homedirs.bin
f ... ..S : /etc/selinux/targeted/contexts/files/file_contexts.local
f ... ..S : /etc/selinux/targeted/policy/policy.33
f ... ..S : /etc/selinux/targeted/seusers

How is it possible to ensure please what the specific change identified by AIDE is in such case ?

Many thanks!

AP

Responses