The next step in the policy development is to mark its resources with the proper file contexts. This will label the files of the application correctly, making sure that the SELinux policy makes the right decisions.
To update the file context definitions, follow the next set of steps:
Create the
myskype.fc
file and add in the definition for~/.Skype/
:HOME_DIR/\.Skype(/.*)? gen_context(system_u:object_r:skype_home_t,s0)
Next, add in the definitions for the
skype
binaries:/opt/skype/skype -- gen_context(system_u:object_r:skype_exec_t,s0) /opt/bin/skype -- gen_context(system_u:object_r:skype_exec_t,s0) /usr/bin/skype -- gen_context(system_u:object_r:skype_exec_t,s0)