Setting context definitions

The next step in the policy development is to mark its resources with the proper file contexts. This will label the files of the application correctly, making sure that the SELinux policy makes the right decisions.

How to do it…

To update the file context definitions, follow the next set of steps:

  1. Create the myskype.fc file and add in the definition for ~/.Skype/:
    HOME_DIR/\.Skype(/.*)?  gen_context(system_u:object_r:skype_home_t,s0)
  2. Next, add in the definitions for the skype binaries:
    /opt/skype/skype  --  gen_context(system_u:object_r:skype_exec_t,s0)
/opt/bin/skype  --  gen_context(system_u:object_r:skype_exec_t,s0)
/usr/bin/skype  --  gen_context(system_u:object_r:skype_exec_t,s0)

How it works…

The definitions for the binaries ...

Get SELinux Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial