<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On 3 July 2013 13:11, Daniel J Walsh <span dir="ltr"><<a href="mailto:dwalsh@redhat.com" target="_blank">dwalsh@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<div class="im"><br>
On 07/02/2013 08:24 AM, Robert Gabriel wrote:<br>
> On 2 July 2013 13:49, Bryan Harris <<a href="mailto:bryanlharris@me.com">bryanlharris@me.com</a><br>
</div><div class="im">> <mailto:<a href="mailto:bryanlharris@me.com">bryanlharris@me.com</a>>> wrote:<br>
><br>
> Hi Robert,<br>
><br>
> On Jul 02, 2013, at 06:45 AM, Robert Gabriel <<a href="mailto:ephemeric@gmail.com">ephemeric@gmail.com</a><br>
</div><div class="im">> <mailto:<a href="mailto:ephemeric@gmail.com">ephemeric@gmail.com</a>>> wrote:<br>
>> [root@pluto ~]# service httpd start env: /etc/init.d/httpd: Permission<br>
>> denied<br>
><br>
> I'm not an MLS expert by any means but I think you want to run a command<br>
> like so,<br>
><br>
> run_init service httpd start<br>
><br>
> Bryan<br>
><br>
><br>
> Thank you!<br>
><br>
> I have read the entire RHEL 6 SELinux Guide (and now searched) and they<br>
> don't mention run_init anywhere!<br>
><br>
> Thank you.<br>
><br>
><br>
</div>> -- selinux mailing list <a href="mailto:selinux@lists.fedoraproject.org">selinux@lists.fedoraproject.org</a><br>
> <a href="https://admin.fedoraproject.org/mailman/listinfo/selinux" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/selinux</a><br>
><br>
In targeted policy we allow unconfined_r roles to transition to system_r. But<br>
in MLS policy you are forced to run run_init to do the transition.<br>
<br>
Luckily most of this will disappear in RHEL7, since systemd will be starting<br>
system daemons, and we will not need this transition for most system daemons.<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.13 (GNU/Linux)<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iEYEARECAAYFAlHUBs8ACgkQrlYvE4MpobMCEgCeI2HwQdj4+dkybNxXGnYyDYHB<br>
AhUAoLRATmfNOojy0lVhIgeE1Yqq+T2j<br>
=NCO1<br>
-----END PGP SIGNATURE-----<br></blockquote><div><br></div><div>Thank you.<br><br></div><div>It's happening now, I'm moving on to allowing Splunk to work.<br><br></div><div>Thank you Daniel, your blog has proved invaluable in terms of troubleshooting info! <br>
</div></div><br></div></div>