Red Hat Bugzilla – Bug 1505059
Clarify wording in "2. SELinux Contexts"
Last modified: 2018-03-05 10:42:01 EST
Document URL: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/chap-security-enhanced_linux-selinux_contexts Section Number and Name: 2. SELinux Contexts Describe the issue: "3. An SELinux policy rule states that the passwd_t domain has entrypoint permission to the passwd_exec_t type." This is confusing as it suggests control flows from the passwd_t domain to the passwd_exec_t type, exactly the opposite of what the rest of the example is showing. I suspect this is because a couple of words were dropped. The sentence should probably be: "3. An SELinux policy rule states that the passwd_t domain has its entrypoint permission set to the passwd_exec_t type." See https://access.redhat.com/discussions/3221251 Suggestions for improvement: Confirm and reword.
Mario is right, we use passwd_exec_t as an entrypoint for the passwd_t domain transition.
The fix has been published on the Customer Portal: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/selinux_users_and_administrators_guide/#sect-Security-Enhanced_Linux-SELinux_Contexts-Domain_Transitions Thank you for the report.