How can I allow a given application to access a given folder and its content2019 Community Moderator Electiondeny any writing to given app and its childrenHow do I edit a file and preserve its access control list / SELinux security context?How to execute a script at the start and end of every application?Acpid event denied by SELinux, how can I savely allow the event without opening security holes?How can I view an application shortcut's content to find what exact executable line it runs?How nginx is able to access its default virtual host files when selinux is enabled?SELinux and docker: allow access to X unix socket in /tmp/.X11-unixIs there an application I can run under i3 that lists available desktop applications by category and shows their desktop icons?SELinux - How to avoid it preventing a process from write access on newly created files into folderSELinux Interfering With sss_cache
What properties make a magic weapon befit a Rogue more than a DEX-based Fighter?
Air travel with refrigerated insulin
categorizing a variable turns it from insignificant to significant
When is the exact date for EOL of Ubuntu 14.04 LTS?
Reason why a kingside attack is not justified
Writing in a Christian voice
"Oh no!" in Latin
What 1968 Moog synthesizer was used in the Movie Apollo 11?
python displays `n` instead of breaking a line
Started in 1987 vs. Starting in 1987
Asserting that Atheism and Theism are both faith based positions
Why does the frost depth increase when the surface temperature warms up?
Name this simple norm equality! (Real Analysis)
What is the purpose of using a decision tree?
Sort with assumptions
Why didn't Voldemort know what Grindelwald looked like?
Mac Mini (2018) 10Gb Port Compatibility
Extract substring according to regexp with sed or grep
I keep switching characters, how do I stop?
Would a primitive species be able to learn English from reading books alone?
Calculate Pi using Monte Carlo
Why can't I get pgrep output right to variable on bash script?
What is the period/term used describe Giuseppe Arcimboldo's style of painting?
How can a new country break out from a developed country without war?
How can I allow a given application to access a given folder and its content
2019 Community Moderator Electiondeny any writing to given app and its childrenHow do I edit a file and preserve its access control list / SELinux security context?How to execute a script at the start and end of every application?Acpid event denied by SELinux, how can I savely allow the event without opening security holes?How can I view an application shortcut's content to find what exact executable line it runs?How nginx is able to access its default virtual host files when selinux is enabled?SELinux and docker: allow access to X unix socket in /tmp/.X11-unixIs there an application I can run under i3 that lists available desktop applications by category and shows their desktop icons?SELinux - How to avoid it preventing a process from write access on newly created files into folderSELinux Interfering With sss_cache
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
asked 14 hours ago
SteeveDrozSteeveDroz
1415
add a comment |
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
asked 14 hours ago
SteeveDrozSteeveDroz
1415
1
Well then obviouslySELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.
– Valentin Bajrami
14 hours ago
add a comment |
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
asked 14 hours ago
SteeveDrozSteeveDroz
1415
I recently installed a game through Steam, but some of the assets of the game aren't loaded.
After a few investigations on the web, the Windows users who had the same problem were adviced to turn off their antivirus in the process of solving the problem.
Using Fedora, I transposed the solution and tried to turn off SELinux with setenforce 0 before running the game. It does work! The assets were correctly loaded ingame.
As I don't really want to turn off SELinux for obvious reasons, I would like to allow that particular application (the game) to read/write that particular folder (the assets).
How can I achieve that?
selinux application
selinux application
asked 14 hours ago
SteeveDrozSteeveDroz
1415
asked 14 hours ago
SteeveDrozSteeveDroz
1415
edited 14 hours ago
SteeveDroz
asked 14 hours ago
SteeveDrozSteeveDroz
1415
asked 14 hours ago
SteeveDrozSteeveDroz
1415
asked 14 hours ago
SteeveDrozSteeveDroz
1415
1415
1
Well then obviouslySELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.
– Valentin Bajrami
14 hours ago
add a comment |
1
Well then obviouslySELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.
– Valentin Bajrami
14 hours ago
1
1
Well then obviously
SELinux is the problem here. For a starter look at the ausearch -m avc -ts recent output. You could (usually) then use audit2allow to generate the policy.– Valentin Bajrami
14 hours ago
Well then obviously
SELinux is the problem here. For a starter look at the ausearch -m avc -ts recent output. You could (usually) then use audit2allow to generate the policy.– Valentin Bajrami
14 hours ago
add a comment |
1 Answer
1
active
oldest
votes
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
answered 13 hours ago
Radek RadekRadek Radek
1014
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507134%2fhow-can-i-allow-a-given-application-to-access-a-given-folder-and-its-content%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
answered 13 hours ago
Radek RadekRadek Radek
1014
add a comment |
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
answered 13 hours ago
Radek RadekRadek Radek
1014
add a comment |
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
answered 13 hours ago
Radek RadekRadek Radek
1014
Well, you can try to do some basic SELinux trouble shooting, like:
restorecon /path/to/your/game- no particular output expected
grep -i =avc /var/log/audit/audit.log | grep -i my_cool_game | audit2allow -M my_cool_game
semodule -i my_cool_game.pp- where my_cool_game is game name, more like eg.
quake2instead ofquake2.exe;-)
- where my_cool_game is game name, more like eg.
answered 13 hours ago
Radek RadekRadek Radek
1014
answered 13 hours ago
Radek RadekRadek Radek
1014
answered 13 hours ago
Radek RadekRadek Radek
1014
answered 13 hours ago
Radek RadekRadek Radek
1014
1014
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507134%2fhow-can-i-allow-a-given-application-to-access-a-given-folder-and-its-content%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Well then obviously
SELinuxis the problem here. For a starter look at theausearch -m avc -ts recentoutput. You could (usually) then useaudit2allowto generate the policy.– Valentin Bajrami
14 hours ago