I just installed SELinux. I read a lot of tutorials but I am not very comfortable with SELinux.
On CentOS help page , I can see that some files in /selinux/ are writable by other user : https://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-selinux.html#s2-SELinux-files-selinux like member file.
The first thing I said to myself is it's dangerous because someone who not allowed which can modify theses files. But I tried, and I can't.
I think it's because the labels are system_u:object_r:security_t:s0 and when I tape id -Z, the result is unconfined_u:unconfined_u:unconfined_u:s0-s0:c0.c1023
Is it because I am on unconfined_u context that I can't write in this file ? Is it not dangerous to keep with 666 permission ? If that I said is incorrect, can you explain me why ? Thanks.