How can I allow a given application to access a given folder and its content2019 Community Moderator Electiondeny any writing to given app and its childrenHow do I edit a file and preserve its access control list / SELinux security context?How to execute a script at the start and end of every application?Acpid event denied by SELinux, how can I savely allow the event without opening security holes?How can I view an application shortcut's content to find what exact executable line it runs?How nginx is able to access its default virtual host files when selinux is enabled?SELinux and docker: allow access to X unix socket in /tmp/.X11-unixIs there an application I can run under i3 that lists available desktop applications by category and shows their desktop icons?SELinux - How to avoid it preventing a process from write access on newly created files into folderSELinux Interfering With sss_cache
Why is "la Gestapo" feminine?
When is the exact date for EOL of Ubuntu 14.04 LTS?
Showing mass murder in a kid's book
Checking @@ROWCOUNT failing
Why didn't Voldemort know what Grindelwald looked like?
Weird lines in Microsoft Word
Reason why a kingside attack is not justified
Trouble reading roman numeral notation with flats
How do I lift the insulation blower into the attic?
What is the purpose of using a decision tree?
Could a welfare state co-exist with mega corporations?
Error in master's thesis, I do not know what to do
What is this high flying aircraft over Pennsylvania?
Why can't I get pgrep output right to variable on bash script?
Put the phone down / Put down the phone
Toggle window scroll bar
Why is participating in the European Parliamentary elections used as a threat?
Are hand made posters acceptable in Academia?
Why do Radio Buttons not fill the entire outer circle?
What should be the ideal length of sentences in a blog post for ease of reading?
Do I have to take mana from my deck or hand when tapping this card?
Not hide and seek
Was Woodrow Wilson really a Liberal?
Should a narrator ever describe things based on a character's view instead of facts?
How can I allow a given application to access a given folder and its content
2019 Community Moderator Electiondeny any writing to given app and its childrenHow do I edit a file and preserve its access control list / SELinux security context?How to execute a script at the start and end of every application?Acpid event denied by SELinux, how can I savely allow the event without opening security holes?How can I view an application shortcut's content to find what exact executable line it runs?How nginx is able to access its default virtual host files when selinux is enabled?SELinux and docker: allow access to X unix socket in /tmp/.X11-unixIs there an application I can run under i3 that lists available desktop applications by category and shows their desktop icons?SELinux - How to avoid it preventing a process from write access on newly created files into folderSELinux Interfering With sss_cache
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
add a comment |
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
1
Well then obviouslySELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.
– Valentin Bajrami
13 hours ago
add a comment |
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
selinux application
edited 14 hours ago
SteeveDroz
asked 14 hours ago
SteeveDrozSteeveDroz
1415
1415
1
Well then obviouslySELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.
– Valentin Bajrami
13 hours ago
add a comment |
1
Well then obviouslySELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.
– Valentin Bajrami
13 hours ago
1
1
Well then obviously
SELinux is the problem here. For a starter look at the ausearch -m avc -ts recent output. You could (usually) then use audit2allow to generate the policy.– Valentin Bajrami
13 hours ago
Well then obviously
SELinux is the problem here. For a starter look at the ausearch -m avc -ts recent output. You could (usually) then use audit2allow to generate the policy.– Valentin Bajrami
13 hours ago
add a comment |
1 Answer
1
active
oldest
votes
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507134%2fhow-can-i-allow-a-given-application-to-access-a-given-folder-and-its-content%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
add a comment |
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
add a comment |
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
answered 13 hours ago
Radek RadekRadek Radek
1014
1014
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507134%2fhow-can-i-allow-a-given-application-to-access-a-given-folder-and-its-content%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Well then obviously
SELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.– Valentin Bajrami
13 hours ago