Unexpected behavior in permissive mode

Joseph L. Casale jcasale at activenetwerx.com
Fri Apr 10 11:51:53 UTC 2015


> Are there any scripts which you can defined? Or did you get it by
> default? It looks bacula is an administrative tool which is going to be
> unconfined domain.

Hi Miroslav,
The backup daemon has commands in its configuration that invokes
without a shell for example in this case:

    su -c '/usr/bin/pg_dumpall -U postgres -f /tmp/pg_dumpall_output.sql' - postgres

Do suggest that moving this into a script that is labeled explicitly might
help?

Thanks,
jlc


More information about the selinux mailing list