Re: runcon vs newrole

[Daniel J Walsh <dwalsh redhat com>]

Clarkson, Mike R (US SSA) wrote:
> What are the differences between and advantages/disadvantages of the
> following two commands:
>
> runcon -l s1 <cmd>
> newrole -l s1 --c <cmd>
>
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list redhat com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   
Of the top of my head

newrole will change the terminal to the level you want to output.  So if 
the app read/writes to the terminal it will work.

runcon will not so terminal apps will fail.  Writing SystemHigh to a 
SystemLow terminal should not work.