Today a question was raised how the unprivileged user domain
was allowed to write to
cgroup_t files. There is nothing obvious about
that in the
roles/unprivuser.te file, so what gives?
I used a simple script (which I've been using for a while already) called seshowtree which presents …more ...