Setting context definitions

The next step in the policy development is to mark its resources with the proper file contexts. This will label the files of the application correctly, making sure that the SELinux policy makes the right decisions.

How to do it…

To update the file context definitions, follow the next set of steps:

1. Create the myskype.fc file and add in the definition for ~/.Skype/:

   HOME_DIR/\.Skype(/.*)?  gen_context(system_u:object_r:skype_home_t,s0)

2. Next, add in the definitions for the skype binaries:

   /opt/skype/skype  --  gen_context(system_u:object_r:skype_exec_t,s0)
   /opt/bin/skype  --  gen_context(system_u:object_r:skype_exec_t,s0)
   /usr/bin/skype  --  gen_context(system_u:object_r:skype_exec_t,s0)

How it works…

The definitions for the binaries are standard, path-based context declarations. The one for the user home directory, however, is special.

As can be seen from the example, the path starts with HOME_DIR. This is a special variable used by SELinux libraries, which automatically...