From: Oliver Hookins <oliver.hookins@anchor.com.au>
To: SELinux@tycho.nsa.gov
Subject: Transitions using su command
Date: Thu, 03 Nov 2005 15:29:20 +1100 [thread overview]
Message-ID: <43699220.1060100@anchor.com.au> (raw)
I'm having some funny behaviour from one of our init scripts. We're
running a multi-user tomcat environment, which as part of its init
script runs a command like the following:
su - $USER -c "$TOMCAT_SCRIPT start < /dev/null >& /dev/null"
If you run this as root, replacing the variables with the appropriate
values, the command runs as expected without any problems. If you run
the init script using the service command it prompts the following:
Your default context is user_u:system_r:unconfined_t.
Do you want to choose a different one? [n]
If you just press enter here, it goes back to the bash prompt and seems
to succeed, however it worries me that when run automatically at startup
and shutdown it might fail. Is there some sort of transition
configuration I am missing, or something I can change to allow this
transition?
--
Thanks,
Oliver
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next reply other threads:[~2005-11-03 4:29 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-11-03 4:29 Oliver Hookins [this message]
2005-11-03 14:21 ` Transitions using su command Stephen Smalley
2005-11-03 23:58 ` Oliver Hookins
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=43699220.1060100@anchor.com.au \
--to=oliver.hookins@anchor.com.au \
--cc=SELinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.