runcon command

[Roland Cruesemann]

Hello,

we use the targeted policy.
We would like to start the PostgreSQL database under the
user postgresql too.
But doing so using the command runcon one needs an additional
allow unconfined_t postgresql_t:process transition;
statement.
This is of course not so nice.
Are there any other methods available?

Best regards,
Roland Cruesemann

[Paul Howarth]

Roland Cruesemann wrote:
> Hello,
>
> we use the targeted policy.
> We would like to start the PostgreSQL database under the
> user postgresql too.
> But doing so using the command runcon one needs an additional
> allow unconfined_t postgresql_t:process transition;
> statement.
> This is of course not so nice.
> Are there any other methods available?

http://www.redhat.com/archives/fedora-selinux-list/2006-June/msg00183.html

Paul.