I'm trying to get the X server running as
user_u:user_r:user_xserver_t:s0-s15:c0.c1023 using a ranged transition.
...
mls_rangetrans_source(user_t)
mls_rangetrans_target(user_xserver_t)
domtrans_pattern(user_t,xserver_exec_t,user_xserver_t)
range_transition user_t xserver_exec_t:process s0 - s15:c0.c1023;
...
but I'm still seeing the following avc:
type=AVC msg=audit(1214800869.443:84): avc: denied { transition }
for pid=2298 comm="xinit" path="/usr/bin/Xorg" dev=dm-0 ino=549292
scontext=user_u:user_r:user_t:s0
tcontext=user_u:user_r:user_xserver_t:s0-s15:c0.c1023 tclass=process
The transition works in permissive, so I'm apparently violating a
constraint. What am I missing?
joe
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
