On Tue, 2009-09-08 at 09:15 -0400, Christopher J. PeBenito wrote: [...] > I'm not sure what the purpose of this would be. I would think it would > effectively telinit to the shutdown runlevel, which would be fine for > apcupsd to do. The shutdown actions would then be performed by init > scripts. Every app which executes /sbin/shutdown needs the following permissions: files_rw_generic_pids() init_exec() init_rw_initctl() init_write_utmp() And I don't like the idea that my daemon may write to generic pids e.g.. A shutdown domain may solve such a problem because I trust /sbin/shutdown but not my daemon ;-) -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
