#selinux
1 article.
-
Running rsync from a systemd timer on Bazzite (SELinux rsync_t domain)
You'll probably never need this exact setup. The reason it's written down is the SELinux mechanics underneath: domain transitions, audit2allow's blind spots, dontaudit, label inheritance, and how to actually figure out why SELinux is blocking you instead of just flipping a boolean.