<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div>Full splunk or just the universal forwarder? Interested to know how you go.</div><div><br></div><div>Cheers,</div><div>Doug</div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Robert Gabriel <<a href="mailto:ephemeric@gmail.com">ephemeric@gmail.com</a>><br><span style="font-weight:bold">Date: </span> Wednesday, 3 July 2013 9:29 PM<br><span style="font-weight:bold">To: </span> Daniel J Walsh <<a href="mailto:dwalsh@redhat.com">dwalsh@redhat.com</a>><br><span style="font-weight:bold">Cc: </span> "<a href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>" <<a href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a>><br><span style="font-weight:bold">Subject: </span> Re: SELinux MLS<br></div><div><br></div><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div><div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On 3 July 2013 13:11, Daniel J Walsh <span dir="ltr"><<a href="mailto:dwalsh@redhat.com" target="_blank">dwalsh@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br><div class="im"><br>
On 07/02/2013 08:24 AM, Robert Gabriel wrote:<br>
> On 2 July 2013 13:49, Bryan Harris <<a href="mailto:bryanlharris@me.com">bryanlharris@me.com</a><br></div><div class="im">> <mailto:<a href="mailto:bryanlharris@me.com">bryanlharris@me.com</a>>> wrote:<br>
><br>
> Hi Robert,<br>
><br>
> On Jul 02, 2013, at 06:45 AM, Robert Gabriel <<a href="mailto:ephemeric@gmail.com">ephemeric@gmail.com</a><br></div><div class="im">> <mailto:<a href="mailto:ephemeric@gmail.com">ephemeric@gmail.com</a>>> wrote:<br>
>> [root@pluto ~]# service httpd start env: /etc/init.d/httpd: Permission<br>
>> denied<br>
><br>
> I'm not an MLS expert by any means but I think you want to run a command<br>
> like so,<br>
><br>
> run_init service httpd start<br>
><br>
> Bryan<br>
><br>
><br>
> Thank you!<br>
><br>
> I have read the entire RHEL 6 SELinux Guide (and now searched) and they<br>
> don't mention run_init anywhere!<br>
><br>
> Thank you.<br>
><br>
><br></div>
> -- selinux mailing list <a href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a><br>
> <a href="https://admin.fedoraproject.org/mailman/listinfo/selinux" target="_blank">
https://admin.fedoraproject.org/mailman/listinfo/selinux</a><br>
><br>
In targeted policy we allow unconfined_r roles to transition to system_r. But<br>
in MLS policy you are forced to run run_init to do the transition.<br><br>
Luckily most of this will disappear in RHEL7, since systemd will be starting<br>
system daemons, and we will not need this transition for most system daemons.<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.13 (GNU/Linux)<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">
http://www.enigmail.net/</a><br><br>
iEYEARECAAYFAlHUBs8ACgkQrlYvE4MpobMCEgCeI2HwQdj4+dkybNxXGnYyDYHB<br>
AhUAoLRATmfNOojy0lVhIgeE1Yqq+T2j<br>
=NCO1<br>
-----END PGP SIGNATURE-----<br></blockquote><div><br></div><div>Thank you.<br><br></div><div>It's happening now, I'm moving on to allowing Splunk to work.<br><br></div><div>Thank you Daniel, your blog has proved invaluable in terms of troubleshooting info!
<br></div></div><br></div></div></div></div></span></body></html>