Hello, my name is Mario and I have a trouble with selinux’s api. My goal is to modify the suPhp apache module, but the function setcon and function setexeccon don’t work.

My apache process runs in dummy_t domain and suPhp file has a security context “user_u:object_r:dummy_exec_t”; in the policy file I write:

“domain_trans(dummy_t,dummy_exec_t,dummy_change_context_t)”

“domain_trans(dummy_t,dummy_exec_t,dummy_change1_context_t)”

And before calling apr_create_process in mod_suphp, I use setexeccon(“user_u:object_r:dummy_change_context_t”) but the function return always -1