runcon: invalid context

Tracy Reed treed at ultraviolet.org
Thu Apr 30 21:55:15 UTC 2015


On Thu, Apr 30, 2015 at 12:21:38PM PDT, Tracy Reed spake thusly:
> I want to manually run an app within a certain context. When I try running it

I should also point out that p16001_u:myapp_r:myapp_t:s0:c1 is all defined in a
custom policy which I have written.

> # runcon p16001_u:myapp_r:myapp_t:s0:c1 /myapp/startup.sh
> runcon: invalid context: p16001_u:myapp_r:myapp_t:s0:c1: Invalid argument

Unfortunately, SELinux doesn't tell me what part of any of this it is unhappy
about.

Here is the entire policy:

http://pastebin.com/N7n9PgAZ

It's a bit messy from all of the hacking I've done on it, especially fumbling
around with transitions and everything. When what I expect should work doesn't
work I started to try all kinds of things which shouldn't matter.

-- 
Tracy Reed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20150430/0af9cfec/attachment.sig>


More information about the selinux mailing list