On Tue, 2006-08-01 at 07:05 +0200, Axel Thimm wrote: > Process contexts: > Current context: root:system_r:hotplug_t:SystemLow-SystemHigh > Init context: system_u:system_r:init_t > /sbin/mingetty system_u:system_r:kernel_t > /usr/sbin/sshd system_u:system_r:kernel_t That's puzzling; init is in the correct domain (init_t) but mingetty and sshd are in kernel_t rather than getty_t init starts life in kernel_t, then re-execs into init_t after loading policy, then performs normal startup. But there are no transitions back into kernel_t. And the files appear to have the right contexts. rpm -q selinux-policy-targeted SysVinit rpm -V selinux-policy-targeted /usr/sbin/semodule -l cmp /etc/selinux/targeted/modules/active/policy.kern /etc/selinux/targeted/policy/policy.20 -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
