How can I find detailed information on what an SELinux boolean actually allows?
Issue
- How can I find detailed information on what allow_staff_exec_content actually dissallows?
- The Security Enhanced Linux Guide states:
To prevent Linux users in the staff_t domain from executing applications in their home directories and /tmp/:
~]# setsebool -P allow_staff_exec_content off
- This doesn't provide specifics about what types are affected by this configuration.
Environment
- Red Hat Enterprise Linux 6
- selinux-policy
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.