SELinux policy for Fedora (and others)


Description of the issue:
I’ve always had the "managed by your organization problem on Fedora, and i’d really like to use DoH. I’ve read somewhere else that this can be caused on linux when SELinux is enforcing on Brave’s directories. I would figure out how to create the policy necessary myself, but I don’t know which directories to target. Can we have an SELinux policy package put in the brave repo to tell it to not enforce on whatever directories are necessary?
How can this issue be reproduced?

  1. Install brave on an SELinux machine

Expected result:
Can’t use secure DNS, but browser’s fine.
Brave Version( check About Brave):
V1.25.73

Additional Information:

Re: the ‘managed by your organization’ thing: https://www.reddit.com/r/Fedora/comments/o0xz0n/brave_your_browser_is_managed_by_organization/

I don’t see how this relates to the DoH thing though. What exactly happens on your machine? You set it to use a DoH provider (which one?) and it won’t resolve anything?

FWIW it works fine for me in a Fedora 34 VM, wich SELinux enforcing, no issues.

There is no way to set it to use doh.

Well, is it because of the ‘managed by your organization’ issue?

I’ve seen other posts indicating that that setup prevents you from changing this setting.

Yes, that’s why I wanted to know if a policy change would let me got rid of that status.

Yeah, did you check the link I posted earlier? Try removing the ‘fedora-chromium-config’ package. That should get rid of the status, and then see if you can change the DoH setting.

Uninstalling that package did solve it.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.