Re: need help getting initng works with selinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2006-01-08 at 10:28 +0100, dragoran wrote:
> after hacking the initng source code I got it to load the policy but 
> still have one problem:
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=173459#c166
> /sbin/ining is labeled as init_exec_t
> whats wrong with it?

A couple of points:
1) Please resync your -selinux patch against the latest
sysvinit-selinux.patch in the Fedora Core CVS tree (or from the devel
srpm).  All of the initial policy loading logic has been moved into
libselinux, encapsulated within the selinux_init_load_policy() function.

2) Make sure that initng re-exec's itself after a successful call to
that function.  Otherwise, it won't transition into its own domain.

-- 
Stephen Smalley
National Security Agency

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux