How can I find detailed information on what an SELinux boolean actually allows?
Issue
- How can I find detailed information on what allow_staff_exec_content actually dissallows?
- The Security Enhanced Linux Guide states:
To prevent Linux users in the staff_t domain from executing applications in their home directories and /tmp/:
~]# setsebool -P allow_staff_exec_content off
- This doesn't provide specifics about what types are affected by this configuration.
Environment
- Red Hat Enterprise Linux 6
- selinux-policy
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.