Red Hat Bugzilla – Bug 119852
SELinux FAQ - difference between domain and type?
Last modified: 2007-04-18 13:05:22 EDT
Description of change/FAQ addition. If a change, include the original text first, then the changed text: See https://listman.redhat.com/archives/fedora-selinux-list/2004-April/msg00018.html Version-Release of FAQ (found on http://people.redhat.com/kwade/fedora-docs/selinux-faq-en/ln-legalnotice.html): selinux-faq-1.0-2 (2004-03-30-T16:20-0800)
*** Bug 119787 has been marked as a duplicate of this bug. ***
Sources in this discussion so far: Questions: http://www.redhat.com/archives/fedora-selinux-list/2004-April/msg00016.html Answers: http://www.redhat.com/archives/fedora-selinux-list/2004-April/msg00018.html http://www.redhat.com/archives/fedora-selinux-list/2004-April/msg00019.html We'll only be answering about the non-difference of a domain and a type.
Please review this answer, is it sufficient? It is the second question, following What is SELinux? ## begin Q:. What is the difference between a domain and a type? A:. There really is no difference between the two terms in SELinux, they are used interchangeably. In a traditional TE model, domains and types are separate. In SELinux, a domain/type will have the _t suffix. ## end
This is incorrect. There is no difference bewteen a domain and a type, although domain is sometimes used to refer to the type of a process. The use of domain in this way stems from traditional TE models, where domains and types are separate. Don't worry about the _t suffix stuff.
OkIC, they really aren't used interchangeably. Rather, the preference is for type, and there is a tradition of using domain to refer to the type of a process. Your language is clearer, I'll swipe it for the answer. TY. This will appear in the next release, 1.0-3.