selinux process transition not taking place

Stephen Smalley sds at tycho.nsa.gov
Mon May 18 18:34:28 UTC 2015


On 05/15/2015 04:30 AM, SZIGETVÁRI János wrote:
> Hello Again,
> 
> I have managed to reproduce the problem on CentOS 7 as well, but due to
> the exlusion of the run_init command, the script needed a bit of
> tailoring as well.
> I have attached the modified script. (To make up for the "lost"
> run_init, the script has to have the
> "system_u:object_r:run_init_exec_t:s0" context.)
> Anyway, the problem's solution is more pressing on CentOS 6, so any help
> or hints would be appreciated.

Sorry, it looks like you are running the equivalent of:
bash /path/to/script
in each of your scripts.

Which means exec bash and have it open the script file and read it, then
interpret it.  So we never call execve() on the script file and thus we
never perform a domain transition.  Is that what you were doing in your
original situation too?




More information about the selinux mailing list