daemons running as initrc_t

Tom London selinux at gmail.com
Thu Jul 19 15:54:18 UTC 2007


[root at localhost ~]# ps agxZ | grep initrc_t
system_u:system_r:initrc_t       2818 ?        S      0:00 nasd -b -local
system_u:system_r:initrc_t       3174 ?        Ss     0:00
NetworkManagerDispatcher
--pid-file=/var/run/NetworkManager/NetworkManagerDispatcher.pid
system_u:system_r:unconfined_t   3802 pts/0    S+     0:00 grep initrc_t
[root at localhost ~]#

So, nasd and Network run in initrc_t.

Should nasd have its own domain (e.g., nasd_exec_t -> nasd_t)?

What about NetworkManagerDispatcher (e.g., also NetworkManager_exec_t, other?)?

tom
-- 
Tom London




More information about the fedora-selinux-list mailing list