Mike Edenfield schrieb:
Markus Bartl wrote:
Hi there.
Ive got my SELinux kernel up and running.
What im wondering about is that i can restart services without
changing to the sysadm_r role.
Are you prompted for the root password when you execute one of the
init.d scripts? And are you in permissive mode or enforcing mode?
In general, a *lot* of strange problems with SELinux are caused by
mislabeled file systems. If certain executables aren't labeled
correctly, even in permissive mode, it will prevent the correct
transitions from happening and produce odd symptoms later on. One
common symptom of this is the rc system not cooperating with SELinux.
I would suggest you relabel everything: rlpkg -a -r
then reboot and see if your behavior is more what you expected.
--K
Hi there.
Do i have to relabel while being in the sysadm_r role?
Im running in permissive mode. If i change to enforcing i cant even do
an ls on my own (/root) directory without changing to sysadm_r.
Many strange things...
