[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: extras package that require changes in selinux-policy (initng)



Stephen Smalley wrote:

On Thu, 2006-02-02 at 18:48 +0100, dragoran wrote:
so what is the solution? use setexecon() to run the daemons as initrc_t to let the domain transitions take effect?

No, that wouldn't work, nor it is useful.

this should also be init_t -> initrc_t -> daemon .. or did I miss / missunderstood something?

As I said, the policy could be extended to include direct transitions
from init_t -> daemon domains so that initng would work as is.  But that
needs to be taken up on selinux list and directed to refpolicy
maintainers.

filled bug:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179761


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]