Re: how to change the context of running process

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On 02/10/2014 09:37 AM, bigclouds wrote:
hi,all
1.
how to change the context of running process.
2.
in my case, libvirtd is initrc_t, how to find  where and which file defines this rule?
libvirtd should be virtd_t, i want to correct it.

The scontext should be virtd_exec_t, and the process
context should be virtd_t, it is defined in virt.fc.

./policy/modules/contrib/virt.fc:/usr/sbin/libvirtd -- gen_context(system_u:object_r:virtd_exec_t,s0)


Please make sure the libvirtd is installed into correct path.

3.audot2allow outputs a rule ,'allow initrc_t svirt_t:process transition'
is there a comamnd line tool can finish this request?  not to install .pp module?

the correct transition rule should be

./virt.tmp:	allow initrc_t virtd_t:process transition;
./virt.tmp:	type_transition initrc_t virtd_exec_t:process virtd_t;

-Roy


thanks




_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.


--
Best Reagrds,
Roy | RongQing Li
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux