Red Hat Bugzilla – Bug 119852
SELinux FAQ - difference between domain and type?
Last modified: 2007-04-18 13:05:22 EDT
Description of change/FAQ addition. If a change, include the original
text first, then the changed text:
Version-Release of FAQ (found on
*** Bug 119787 has been marked as a duplicate of this bug. ***
Sources in this discussion so far:
We'll only be answering about the non-difference of a domain and a type.
Please review this answer, is it sufficient? It is the second
question, following What is SELinux?
Q:. What is the difference between a domain and a type?
A:. There really is no difference between the two terms in SELinux,
they are used interchangeably. In a traditional TE model, domains and
types are separate. In SELinux, a domain/type will have the _t suffix.
This is incorrect.
There is no difference bewteen a domain and a type, although domain is
sometimes used to refer to the type of a process. The use of domain
in this way stems from traditional TE models, where domains and types
Don't worry about the _t suffix stuff.
OkIC, they really aren't used interchangeably. Rather, the preference
is for type, and there is a tradition of using domain to refer to the
type of a process.
Your language is clearer, I'll swipe it for the answer. TY.
This will appear in the next release, 1.0-3.